Federal cybersecurity regulators have updated the Known Exploited Vulnerabilities catalog to enforce Binding Operational Directive 26-04 timelines for a critical […]
Active cyber espionage campaigns targeting enterprise email infrastructure have been uncovered, leveraging specialized web client vulnerabilities to deploy persistent backdoors.
A critical access control vulnerability residing within an enterprise firewall management platform has been formally added to the federal catalog
Emergency security updates have been distributed for a widely deployed web community software platform following the public disclosure of a
Emergency software updates have been distributed across mobile and desktop operating system runtimes to patch zero-day vulnerabilities undergoing active exploitation.
Threat monitoring arrays report accelerated automated scanning probing on-premises software defined networking orchestrators for an unauthenticated command injection defect. The
A detailed technical breakdown and functional proof of concept code have been published for a critical authentication bypass flaw impacting
Active wild exploitation targeting an unpatched remote code execution vulnerability in a widely integrated Java JSON parsing library continues to
A specialized social engineering campaign targeting corporate users has been uncovered, using fraudulent collaboration software landing pages to distribute legitimate
A critical local privilege escalation flaw residing within the XFS storage subsystem of the Linux kernel has been detailed alongside
