Common vulnerabilities and exposures (CVEs) include all types of subversive entry-points discovered in programs, along with a ...

Surge in vulnerabilities and exploits leaving overloaded security teams with little recourse but to embrace risk-based approaches to patching what they can. Enterprise attack surfaces continue to ...

Many hackers are opportunistic and often attempt to exploit security gaps to launch an attack days before a vulnerability is disclosed. According to a new report published on July 31 by GreyNoise, ...

In today’s digital age, safeguarding sensitive information is of paramount importance to both individuals and businesses. However, recent developments indicate a significant breach in the security of ...

Update, May 11, 2025: This story, originally published May 9, has been updated with more details on the move towards greater cloud Common Vulnerabilities and Exposures (CVE) transparency by both ...

The Cybersecurity and Infrastructure Security Agency (CISA) has released CISA Strategic Focus: CVE Quality for a Cyber Secure Future. The detailed roadmap identifies priorities that will elevate the ...

The latest flaw in Cisco Systems Identity Services Engine (ISE), which could expose sensitive information to an attacker, ...

Wireless communication has become the backbone of modern connectivity, but its ubiquity brings an ever-growing set of vulnerabilities. The latest data highlights an alarming trend: The number of ...

Many organizations prioritize compliance, assuming it ensures security—but does it, actually? Vulnerability management should come first, as security is about proactively identifying and mitigating ...

Tanium, a leader in Autonomous Endpoint Management (AEM), announced today it has been authorized by the CVE Program as a CVE Numbering Authority (CNA). As a CNA, Tanium will publicly document and ...

A newly discovered vulnerability, identified as CVE-2024-6768, has surfaced in the Common Log File System (CLFS.sys) driver of Windows. This issue, identified by Fortra cybersecurity researcher, ...

Fraudsters deploy various kinds of tactics, such as phishing attacks, fake tokens, Ponzi schemes and pump-and-dump tactics. Warning signs include unrealistic promises, lack of transparency and sudden ...