Technology, tested in real life.
Every TechInform story filed under Open Source, newest first.
New Zealand's NCSC now says attackers are exploiting CVE-2026-111497. The warning moves Brotli responders from patch planning to incident response, while several platforms still lack fixes.
Attackers turned LiteLLM’s real release pipeline against its users, pushing a credential stealer and remote-access backdoor through PyPI and official container tags.
PHP has released emergency fixes for two critical flaws that can let an unauthenticated attacker run code on a web server. Updating is the only complete remedy.
A renewed GhostAction campaign is planting fake security-audit workflows in GitHub repositories to steal Actions secrets and credentials buried in source history.