Vulnerability Management

VMware Urges Customers to Address Actively Exploited Zero-Day Vulnerabilities
VMware warns customers to urgently patch actively exploited zero-day vulnerabilities to protect their systems from potential attacks.

CISA Calls on Government to Address Exploited Vulnerabilities in Cisco and Microsoft
CISA urges government action on exploited vulnerabilities in Cisco and Microsoft, highlighting the need for enhanced cybersecurity measures.

Urgent Alert: CISA Warns of Active Exploitation of Vulnerabilities in Cisco, Hitachi, Microsoft, and Progress
CISA warns of active exploitation of vulnerabilities in Cisco, Hitachi, Microsoft, and Progress. Urgent action recommended to mitigate risks.

Ransomware Attacks Target Paragon Partition Manager Driver Vulnerability
Ransomware attacks exploit a vulnerability in Paragon Partition Manager drivers, threatening data security and system integrity. Stay informed and protected.

Weekly Update: Insights on Zero-Day Vulnerabilities, AI Security Breaches, and Cryptocurrency Theft
Stay informed with THN Weekly Update: Explore insights on zero-day vulnerabilities, AI security breaches, and the latest in cryptocurrency theft.

New BYOVD Attacks Target Zero-Day Vulnerability in Paragon Partition Manager
New BYOVD attacks exploit a zero-day vulnerability in Paragon Partition Manager, posing significant risks to system security and data integrity.

Ransomware Criminals Exploit CISA’s KEV List: A Critical Flaw Uncovered
Ransomware criminals exploit vulnerabilities in CISA’s KEV list, revealing critical flaws that threaten cybersecurity and demand urgent attention.

Amnesty Reveals Cellebrite’s Zero-Day Exploit Used to Access Serbian Activist’s Android Device
Amnesty exposes Cellebrite’s zero-day exploit that compromised a Serbian activist’s Android device, raising concerns over digital privacy and security.

Outdated Vulnerabilities: A Major Target for Exploitation
Discover how outdated vulnerabilities pose significant risks for exploitation and learn strategies to protect your systems from potential attacks.

Exposed: Over 12,000 API Keys and Passwords Discovered in Public Datasets for LLM Training
Discover how over 12,000 API keys and passwords were found in public datasets used for LLM training, raising serious security concerns.

Qualcomm Commits to 8 Years of Security Updates for Android Devices Powered by Its Chips
Qualcomm pledges 8 years of security updates for Android devices using its chips, enhancing user safety and device longevity in a rapidly evolving tech landscape.

MITRE Caldera Security Alert: Critical Vulnerability Discovered
Critical vulnerability discovered in MITRE Caldera. Stay informed on security alerts and protect your systems from potential threats.

39% of Vulnerabilities Risk Both Visibility and Control Loss
Discover how 39% of vulnerabilities lead to both visibility and control loss, impacting security and risk management in organizations.

Software Vulnerabilities Require Nearly Nine Months for Resolution
Software vulnerabilities take nearly nine months to resolve, highlighting the urgent need for improved security measures and faster response strategies.

PolarEdge Botnet Targets Cisco Vulnerabilities to Compromise ASUS, QNAP, and Synology Devices
PolarEdge Botnet exploits Cisco vulnerabilities to compromise ASUS, QNAP, and Synology devices, posing significant security risks.

Hackers Target Krpano Framework Vulnerability to Inject Spam Ads Across 350+ Sites
Hackers exploit a vulnerability in the Krpano framework, injecting spam ads into over 350 websites, compromising user experience and site integrity.

CISA Includes Microsoft and Zimbra Vulnerabilities in KEV Catalog Due to Ongoing Exploitation
CISA adds Microsoft and Zimbra vulnerabilities to the KEV Catalog amid ongoing exploitation, urging immediate attention and remediation.

86% of Codebases Expose Open Source Software Vulnerabilities
Discover how 86% of codebases reveal open source software vulnerabilities, highlighting the need for enhanced security measures in software development.

Majority of Hackers Deploy New Exploit Code Within 48 Hours of Attack
Most hackers release new exploit code within 48 hours of an attack, highlighting the rapid evolution of cyber threats and the need for swift defenses.

Exploitation of 7-Year-Old Vulnerability in Salt Typhoon Cyberattack
“Discover how a 7-year-old vulnerability was exploited in the Salt Typhoon cyberattack, highlighting critical security lapses and urgent need for updates.”

Over 2,500 Truesight.sys Driver Variants Exploited to Evade EDR and Deploy HiddenGh0st RAT
Over 2,500 Truesight.sys driver variants exploited to bypass EDR systems and deploy HiddenGh0st RAT, highlighting critical security vulnerabilities.

CISA Alerts on Two Actively Exploited Security Vulnerabilities in Adobe and Oracle Products
CISA warns of two actively exploited vulnerabilities in Adobe and Oracle products, urging immediate action to mitigate potential security risks.

Critical Security Flaw Found in Essential Addons for Elementor
Critical security flaw discovered in Essential Addons for Elementor, exposing websites to potential threats. Update now to safeguard your site.

Talos: Cisco Zero Days Not Exploited in Salt Typhoon Telecom Breaches
Discover how Talos identified Cisco zero days that were not exploited in the Salt Typhoon telecom breaches, enhancing cybersecurity awareness.