Vulnerability
Discover expert analysis on vulnerability with news, features and insights from the team at IT Pro.
-

More than 12 million enterprise Linux systems are vulnerable to root access
News Researchers have warned Linux flaws allow unprivileged local users to gain root privileges and weaken container isolation
By Emma Woollacott Published
News -

UK Government says it’s ‘cut cyber attack fix times by 84%’ with new vulnerability monitoring service
News A new scanning service spots weaknesses in government DNS records for 6,000 UK public sector bodies
By Emma Woollacott Published
News -

Security agencies issue warning over critical Cisco Catalyst SD-WAN vulnerability
News Threat actors have been exploiting the vulnerability to achieve root access since 2023
By Emma Woollacott Published
News -

Flaws in popular VS Code extensions pose serious risks to developers
News The VS Code vulnerabilities highlight broader IDE security risks, said OX Security
By Emma Woollacott Published
News -

CVEs are set to top 50,000 this year
News While the CVE figures might be daunting, they won't all be relevant to your organization
By Emma Woollacott Published
News -

Microsoft patches six zero-days targeting Windows, Word, and more
News Patch Tuesday update targets large number of vulnerabilities already being used by attackers
By Nicole Kobie Published
News -

Experts welcome EU-led alternative to MITRE's vulnerability tracking scheme
News The EU-led framework will reduce reliance on US-based MITRE vulnerability reporting database
By Ross Kelly Published
News -

Veeam patches Backup & Replication vulnerabilities, urges users to update
News The vulnerabilities affect Veeam Backup & Replication 13.0.1.180 and all earlier version 13 builds – but not previous versions.
By Emma Woollacott Published
News -

Two Fortinet vulnerabilities are being exploited in the wild – patch now
News Arctic Wolf and Rapid7 said security teams should act immediately to mitigate the Fortinet vulnerabilities
By Emma Woollacott Published
News -

Everything you need to know about Google and Apple’s emergency zero-day patches
News A serious zero-day bug was spotted in Chrome systems that impacts Apple users too, forcing both companies to issue emergency patches
By Nicole Kobie Published
News -

Security experts claim the CVE Program isn’t up to scratch anymore
News CVE data is vital in combating emerging threats, yet inaccurate ratings and lengthy wait times are placing enterprises at risk
By Emma Woollacott Published
News -

IBM AIX users urged to patch immediately as researchers sound alarm on critical flaws
News Network administrators should patch the four IBM AIX flaws as soon as possible
By Emma Woollacott Published
News