This article contains 10 of what we believe to be the biggest stories we covered throughout the year on SD Times.

As exploitation activity against CVE-2025-55182, researchers are finding some exploits contain bypasses for Web application firewall (WAF) rules.

Microsoft has a whole team dedicated to eliminating "every line of C and C++ from Microsoft by 2030," which includes Windows ...

Warnings continue to mount over a critical vulnerability in the widely used web application framework React, with threat intelligence analysts warning that it's ...

Plane 1.2.0 rebuilt its frontend stack, migrating from Next.js to React Router and Vite, and fixed critical security ...

Attackers are actively exploiting a zero-day bug in Gogs, a popular self-hosted Git service, and the open source project ...

You can get a react-blog site up and running on your local dev environment in 10 minutes with these five steps: These instructions will get you a copy of the project up and running on your local ...

Security community needs to rally and share more info faster, one researcher says Amid new reports of attackers pummeling a maximum security hole (CVE-2025-55182) in the React JavaScript library, ...

You can create a release to package software, along with release notes and links to binary files, for other people to use. Learn more about releases in our docs.

The known RAT aimed at gamers is now targeting security professionals searching GitHub for PoCs and exploit codes.

SEAL Security researchers warned that a critical React flaw fueled a surge in wallet-draining attacks on crypto websites.

Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing ...