-
Flaws in popular VS Code extensions pose serious risks to developers
News The VS Code vulnerabilities highlight broader IDE security risks, said OX Security
News -
CVEs are set to top 50,000 this year
News While the CVE figures might be daunting, they won't all be relevant to your organization
News -
Microsoft patches six zero-days targeting Windows, Word, and more
News Patch Tuesday update targets large number of vulnerabilities already being used by attackers
News -
Experts welcome EU-led alternative to MITRE's vulnerability tracking scheme
News The EU-led framework will reduce reliance on US-based MITRE vulnerability reporting database
News -
Veeam patches Backup & Replication vulnerabilities, urges users to update
News The vulnerabilities affect Veeam Backup & Replication 13.0.1.180 and all earlier version 13 builds – but not previous versions.
News -
Two Fortinet vulnerabilities are being exploited in the wild – patch now
News Arctic Wolf and Rapid7 said security teams should act immediately to mitigate the Fortinet vulnerabilities
News -
Everything you need to know about Google and Apple’s emergency zero-day patches
News A serious zero-day bug was spotted in Chrome systems that impacts Apple users too, forcing both companies to issue emergency patches
News -
Security experts claim the CVE Program isn’t up to scratch anymore
News CVE data is vital in combating emerging threats, yet inaccurate ratings and lengthy wait times are placing enterprises at risk
News -
IBM AIX users urged to patch immediately as researchers sound alarm on critical flaws
News Network administrators should patch the four IBM AIX flaws as soon as possible
News -
Critical Dell Storage Manager flaws could let hackers access sensitive data – patch now
News A trio of flaws in Dell Storage Manager has prompted a customer alert
News -
Flaw in Lenovo’s customer service AI chatbot could let hackers run malicious code, breach networks
News Hackers abusing the Lenovo flaw could inject malicious code with just a single prompt
News -
Industry welcomes the NCSC’s new Vulnerability Research Initiative – but does it go far enough?
News The cybersecurity agency will work with external researchers to uncover potential security holes in hardware and software
News
