Threat actors are exploiting a vulnerability in Gitea’s reverse-proxy authentication mechanism to access internet-accessible instances by supplying only a valid username.

A critical flaw in Gitea's official Docker image let anyone impersonate an admin with one forged header. Sysdig spotted the ...

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...

Discover how API Gateway security debt can turn your critical control point into a liability. Learn from expert Ankur ...

CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled ...

The world of enterprise mobile apps has witnessed a great shift recently. Since iOS now holds almost half of the global smartphone market and with Apple’s focus on privacy and security, businesses are ...

Suspected Chinese spies have been breaking into major US and Canadian universities since May, exploiting vulns in Roundcube mailservers to steal data belonging to physics and engineering ...

Palo Alto bought Portkey, Solo.io gave agentgateway to the Linux Foundation. Agent gateways are consolidating into a category ...

Proofpoint says UNK_MassTraction exploited patched Roundcube flaws to target U.S. and Canadian university mail servers.

Hackers began exploiting vulnerability CVE-2026-8451 in Citrix NetScaler ADC and NetScaler Gateways less than 24 hours after disclosure.

Google has introduced Genkit Agents in preview, enabling developers to build AI agents with multi-agent workflows, session management, human approvals, and HTTP deployment for full-stack applications.

Come 15 September, multipurpose crawlers used by the likes of Google, Microsoft and Apple will be blocked by default according to Cloudflare's new rules.