Vulnerabilities
Ivanti has released patches for two EPMM vulnerabilities that have been chained in the wild for remote code execution.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Malware & Threats
Patch Tuesday: Microsoft patches at least 70 security bugs and flagged five zero-days in the “exploitation detected” category.
Data Protection
An information exposure flaw in TeleMessage has been added to CISA’s Known Exploited Vulnerabilities catalog.
Mobile & Wireless
Apple rolls out iOS and macOS platform updates to fix serious security bugs that could be triggered simply by opening an image or video...
Tracking & Law Enforcement
Anyproxy and 5socks, websites offering proxy services through devices ensnared by a botnet, have been disrupted in a law enforcement operation.
Ransomware
Private messages, Bitcoin addresses, victim data, and attacker information were leaked after someone hacked a LockBit admin panel.
Vulnerabilities
SonicWall patches three SMA 100 vulnerabilities, including a potential zero-day, that could be chained to execute arbitrary code remotely.
ICS/OT
Agencies say the attacks leverage basic intrusion techniques, but poor cyber hygiene within critical infrastructure organizations could lead to disruptions and damage.
Hacker Conversations
John Kindervag is best known for developing the Zero Trust Model. He is a hacker, but not within our common definition of a hacker...
Mobile & Wireless
Android’s May 2025 security update includes patches for an exploited vulnerability in the FreeType open source rendering engine.
Government
The proposed $491 million cut is being positioned as a “refocusing”of CISA on its core mission “while eliminating weaponization and waste.”
Cybercrime
A 25-year-old has admitted hacking Disney systems and leaking data under the guise of a hacktivist collective named NullBulge.
Cybercrime
Major UK retailers Co-op, Harrods, and M&S are scrambling to restore services that were affected by cyberattacks.
Incident Response
Nova Scotia Power and Emera are responding to a cybersecurity incident that impacted IT systems and networks.
Management & Strategy
The OpenEoX model proposes a shared data format that can be integrated into SBOMs, security advisories, and other ecosystem tools.
Endpoint Security
Vulnerabilities in Apple’s AirPlay protocol could have allowed attackers to execute code remotely without user interaction.
Cyberwarfare
As Xi Jinping advances his vision for China’s dominance by 2049, cybersecurity experts warn that connected technologies—like EV batteries—may quietly serve as tools of...
Management & Strategy
Hundreds of companies are showcasing their products and services this week at the 2025 edition of the RSA Conference in San Francisco.
CISO Strategy
This tension between hard-edged risk realism and breathless AI evangelism sets an unmistakable tone for a bellwether conference where 40,000-plus gather to do business.
Vulnerabilities
A zero-day vulnerability in SAP NetWeaver potentially affects more than 10,000 internet-facing applications.
Data Protection
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities
