Vulnerabilities
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
Hi, what are you looking for?
SecurityWeek
All posts tagged "CVE"
Government
CISA says it is time for the CVE Program to focus on improving trust, responsiveness, and the caliber of vulnerability data.
Government
The proposed $491 million cut is being positioned as a “refocusing”of CISA on its core mission “while eliminating weaponization and waste.”
Government
The US government's cybersecurity agency CISA has “executed the option period on the contract” to keep the vulnerability catalog operational.
Government
MITRE warns of a deterioration of national vulnerability databases and advisories, slowed vendor reaction and limited response operations.
Vulnerabilities
NIST has marked pre-2018 CVEs in NVD as ‘Deferred’ and will no longer spend resources on enriching them.
Vulnerabilities
Two CVEs now exist for an actively exploited CrushFTP vulnerability and much of the security industry is using the ‘wrong one’.
Government
The effects of the backlog are already being felt in vulnerability management circles where NVD data promises an enriched source of truth.
Cloud Security
Google Cloud will be assigning CVE identifiers to serious cloud vulnerabilities, even ones that don’t require patching.
Government
NIST is receiving support to get the NVD and CVE processing back on track within the next few months.
Vulnerabilities
MITRE is unable to compile a list of all new vulnerabilities, and NIST is unable to subsequently, and consequently, provide an enriched database of...
Government
White House calls for the “timely, complete, and consistent” publication of CVE and CWE data to help solve the security metrics problem.
Endpoint Security
Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.
Artificial Intelligence
Artificial Intelligence
Vulnerabilities
Mobile & Wireless
Artificial Intelligence
The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data.
Malware & Threats
Management & Strategy
