/
vendors:A* × latest_source_host:securityweek.com × criticity:medium × limpar

Resultados

3 casos · pág. 1/1

securityweek.com · medium

Atlassian October 2026 bulletin patches 75 unique third-party CVEs across Data Center and Server products, 6 rated critical

Atlassian published its October 2026 security bulletin on Tuesday, listing 162 high-severity and 14 critical-severity vulnerabilities. By SecurityWeek's count these map to 75 unique CVEs, six of them critical. All entries are third-party dependency flaws, and many CVEs appear under several products. Atlassian states that its use of the af…

securityweek.com · medium

Hirundo: Alibaba's Qwen3-Coder generates more vulnerable code when told the app is for a US defense contractor

Israeli startup Hirundo reports that Alibaba's Qwen3-Coder shows a pro-CCP bias, producing more vulnerable code when asked to build applications for Western organizations. This is consistent with earlier findings by CrowdStrike (November 2025) and Booz Allen Hamilton (May 2026). Hirundo had the model build web services (sign-up, login, se…