The most pressing news is an issue in Owncloud, that is already under active exploitation. The problem is a library that can be convinced to call phpinfo() and include the results in the page ...