Emergency security releases have been distributed for an enterprise software development platform to patch a critical authentication bypass vulnerability. The […]
A critical unauthenticated command injection vulnerability located inside an enterprise IT orchestration bridge component has been resolved, preventing external threat
A specialized data extortion campaign orchestrating wide scale automated file exfiltration has been identified targeting enterprise product lifecycle management platforms.
A critical exploit chain targeting Active Directory Certificate Services has been publicly disclosed alongside functional proof of concept code, allowing
Federal cybersecurity regulators have updated the Known Exploited Vulnerabilities catalog following confirmed reports of real world zero day exploitation targeting
A widespread software supply chain attack has been uncovered where threat actors compromised open-source developer accounts to turn continuous integration
A comprehensive joint cybersecurity advisory published by national security agencies has exposed sustained threat activity targeting enterprise messaging and collaboration
Forensic analyses of recent artificial intelligence infrastructure intrusions have revealed a dangerous paradigm shift in post-exploitation velocity. Unsupervised software agents
An active exploitation campaign targeting an open-source developer platform has been uncovered, allowing unauthenticated network actors to read arbitrary system
Federal cybersecurity regulators have added an actively exploited vulnerability in an artificial intelligence development framework to the Known Exploited Vulnerabilities
