Hackers are spoofing themselves as GitHub's Dependabot to steal user passwords

CVE-2021-44832 - Apache Log4j 2.17.0 Arbitrary Code Execution via JDBCAppender DataSource Element

Serious vulnerabilities found in Google and Samsung Android camera apps

Application Security Resources for Developers

Securing PhoneGap Apps