A Bootiful Podcast: Spring Security lead Rob Winch answers some security questions for me

Hi Spring and security fans! I got the legendary Spring Security lead Rob Winch to answers some of my burning security questions for us! Also: make sure you're downloading all the updates for the new Spring releases this week, the week of June 11th, 2026! or later...

Security Bulletin: Security vulnerability in Golang affects IBM Robotic Process Automation for Cloud Pak

Summary A security vulnerability in Golang affects IBM Robotic Process Automation. Golang is used by IBM Robotic Process Automation as part of its deployment. This bulletin identifies the fixes required to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2026-25518 DESCRIPTION:...

MAL-2026-3191 Malicious code in rblx-https (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4b7d7435a6bcfd1a9437108a21af9ca6be7c60aa1e0c6e9e90a40ac43b26cf67 During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...

A Bootiful Podcast: Spring Security lead Rob Winchon Spring Security 7

Hi, Spring fans! In this installment, I have the privilege of sitting down and talking to the legendary Rob Winch, lead of Spring Security, Spring Session, and the amazing Testjars project...

EUVD-2025-201790

xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Versions 3.1.3 contain an authentication bypass vulnerability due to a flaw in the libxml2 canonicalization process during document transformation. When libxml2’s canonicalization is invoked on an invalid XML...

Scam Ads Are Flooding Social Media. These Former Meta Staffers Have a Plan

Rob Leathern and Rob Goldman, who both worked at Meta, are launching a new nonprofit that aims to bring transparency to an increasingly opaque, scam-filled social media ecosystem...

EUVD-2020-11667

Malware in sbrugna...

EUVD-2024-28996

Malicious code in bioql PyPI...

Malicious code in rob-lox-rob-ux-generator-for-free-kdfld (npm)

The package rob-lox-rob-ux-generator-for-free-kdfld was found to contain malicious code...

Malicious code in rob-lox-free-codes-rob-ux-2023-ekdlzdz (npm)

The package rob-lox-free-codes-rob-ux-2023-ekdlzdz was found to contain malicious code...

Malicious code in rob-lox-rob-ux-for-fr-ee-2023-working-dkzkdku (npm)

The package rob-lox-rob-ux-for-fr-ee-2023-working-dkzkdku was found to contain malicious code...

MAL-2025-45896 Malicious code in rob-lox-rob-ux-for-fr-ee-2023-working-dkzkdku (npm)

The package rob-lox-rob-ux-for-fr-ee-2023-working-dkzkdku was found to contain malicious code...

MAL-2025-45895 Malicious code in rob-lox-free-codes-rob-ux-2023-ekdlzdz (npm)

The package rob-lox-free-codes-rob-ux-2023-ekdlzdz was found to contain malicious code...

Sendmarc appoints Rob Bowker as North American Region Lead

Wilmington, United States, 4th September 2025, CyberNewsWire...

This Week in Spring - August 12th, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's August 5th! Which means we're only a few short weeks away until SpringOne 2025! Have you registered? There's so much to cover this week, so let's dive right into it! I love Spring Modulith and I love JetBrains IntelliJ...

A Bootiful Podcast: Spring Security lead Rob Winch on Spring Security 7.0, SpringOne 2025, and more

Hi, Spring fans! In this installment I'm joined by Spring Security lead Rob Winch to discuss the amazing new additions to Spring Security 7.0, coming in November of 2025, and the coverage you can expect when you see our talk at SpringOne 2025 have you registered - https://springone.io ?...

CVE-2020-19769

A lack of target address verification in the BurnMe function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script...

CVE-2025-24645

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rob Scott Eazy Under Construction eazy-under-construction allows Reflected XSS.This issue affects Eazy Under Construction: from n/a through = 1.0...

CVE-2025-01012

creationtimestamp| type| source ---|---|--- 2025-04-14 01:00:04+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqedabwks2q 2025-04-14 01:00:44+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqeehodl22q 2025-04-14 01:02:08+00:00| seen|...

WordPress Ultimate Classified Listings plugin <= 1.5 - Cross-Site Request Forgery to Account Takeover vulnerability

Cross-Site Request Forgery to Account Takeover vulnerability discovered by Rob Banks in WordPress Plugin Ultimate Classified Listings versions = 1.5...