Items Tagged with 'vulnerability'

U.S. cyber officials are considering shortening the deadline for fixing critical vulnerabilities in government IT, and security experts are sharing their thoughts. 

While vulnerability management and patching remain necessary, they are not sufficient to address the new reality that Mythos represents.

NIST recently changed how it handles CVEs. 

According to research from two ethical hackers, Restaurant Brands International (RBI) has security flaws that could enable a malicious actor to remotely eavesdrop on orders in the drive-through. 

CISA has announced the addition of two vulnerabilities to its Known Exploited Vulnerabilities catalog.

An Apache ActiveMQ flaw is being actively exploited. Then, it’s being patched by the actors who leveraged it.  

Most healthcare organizations won’t be able to fully transition to Windows 11 before Microsoft ends Windows 10 support. That means that bad actors will soon be launching malware that takes advantage. 

A Russia-sponsored campaign is targeting end-of-life devices via a seven-year-old vulnerability. 

An Erlang/OTP vulnerability has been exploited in the wild, with a majority of attempts targeting OT environments. 

CISA has issued an emergency directive in response to a vulnerability affecting hybrid Microsoft Exchange users.