Microsoft’s April 2025 Patch Tuesday fixes a critical zero-day exploit and addresses 134 vulnerabilities, enhancing security for users and systems.
Amazon EC2 SSM Agent vulnerability fixed, addressing path traversal privilege escalation risks to enhance security and protect user data.
A vulnerability in WhatsApp enables attackers to execute malicious code on Windows PCs, posing significant security risks to users.
Google releases the April Android update to address two critical zero-day vulnerabilities, enhancing device security and user protection.
NIST prioritizes vulnerability management by deferring pre-2018 CVEs, focusing resources on more recent threats to enhance cybersecurity effectiveness.
CISA warns of active exploitation of a CrushFTP vulnerability, urging immediate patching to protect systems from potential attacks.
CISA adds CrushFTP vulnerability to the KEV Catalog following reports of active exploitation, urging immediate attention and remediation.
Google releases an Android update to fix two critical vulnerabilities, enhancing device security and protecting user data from potential threats.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Google addresses critical Android zero-day vulnerabilities and 60 additional security flaws, enhancing user safety and device protection.
Windows 11 24H2 update paused due to BSOD issues linked to code-obfuscation drivers, impacting system stability and user experience.
Explore this week’s highlights: VPN vulnerabilities, Oracle’s breach, ClickFix surge, and more critical cybersecurity updates. Stay informed!
Discover how relying on vanity metrics can create a false sense of security, leaving you exposed to real vulnerabilities in your strategy.
“Discover how a WooCommerce API exploit led to a carding tool being downloaded 34,000 times on PyPI, raising security concerns for online stores.”
Discover how a WinRAR vulnerability bypasses Windows Mark of the Web security warnings, exposing users to potential risks and malware threats.
Microsoft credits EncryptHub hacker for exposing Windows vulnerabilities linked to over 618 breaches, enhancing security awareness and response.
Chinese espionage group targets legacy Ivanti VPN devices, exploiting vulnerabilities to enhance cyber operations and access sensitive information.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Ivanti releases critical security patches for Connect Secure, Policy Secure, and ZTA Gateways to address CVE-2025-22457 vulnerabilities.
CISA expands its KEV Catalog by adding new vulnerabilities, enhancing cybersecurity measures and providing critical updates for organizations to protect their systems.
Explore Microsoft Binary vulnerabilities in Remote Desktop Protocol, uncovering exploitation methods and security implications for users and organizations.
Explore the implications of reaching a distroless tipping point in software development, highlighting benefits, challenges, and future trends.
Chinese state-sponsored hackers exploit a newly disclosed Ivanti vulnerability, raising concerns over cybersecurity and potential data breaches.
Urgent alert: Exploitation of Ivanti vulnerability triggers deployment of TRAILBLAZE and BRUSHFIRE malware, posing significant security risks.
A vulnerability in Apache Parquet allows attackers to execute remote code, posing significant security risks to affected systems.
Critical RCE vulnerability discovered in the widely used Apache Parquet library, posing significant security risks for applications relying on it.