“Discover how a WooCommerce API exploit led to a carding tool being downloaded 34,000 times on PyPI, raising security concerns for online stores.”
Discover how a WinRAR vulnerability bypasses Windows Mark of the Web security warnings, exposing users to potential risks and malware threats.
Microsoft credits EncryptHub hacker for exposing Windows vulnerabilities linked to over 618 breaches, enhancing security awareness and response.
Chinese espionage group targets legacy Ivanti VPN devices, exploiting vulnerabilities to enhance cyber operations and access sensitive information.
Ivanti releases critical security patches for Connect Secure, Policy Secure, and ZTA Gateways to address CVE-2025-22457 vulnerabilities.
CISA expands its KEV Catalog by adding new vulnerabilities, enhancing cybersecurity measures and providing critical updates for organizations to protect their systems.
Explore Microsoft Binary vulnerabilities in Remote Desktop Protocol, uncovering exploitation methods and security implications for users and organizations.
Explore the implications of reaching a distroless tipping point in software development, highlighting benefits, challenges, and future trends.
Nubivance is a Rapid7 Registered Partner delivering vulnerability management as a service - scanning, risk-based prioritization, and remediation follow-through across IT and OT.
Fix the backlog
Chinese state-sponsored hackers exploit a newly disclosed Ivanti vulnerability, raising concerns over cybersecurity and potential data breaches.
Urgent alert: Exploitation of Ivanti vulnerability triggers deployment of TRAILBLAZE and BRUSHFIRE malware, posing significant security risks.
A vulnerability in Apache Parquet allows attackers to execute remote code, posing significant security risks to affected systems.
Critical RCE vulnerability discovered in the widely used Apache Parquet library, posing significant security risks for applications relying on it.
Ivanti has released critical patches for a Connect Secure zero-day vulnerability that has been actively exploited since March. Update now to secure your systems.
Explore the risks of exploiting the CrushFTP vulnerability post-disclosure, highlighting security challenges and the need for timely patching.
Explore the reasons behind the mass-scanning of Juniper and Palo Alto Networks products, uncovering security implications and industry responses.
Ivanti Connect Secure Update MAR-25993211-r1.v1 (RESURGE) enhances security and performance for seamless remote access and connectivity.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Explore the effectiveness of CSRF tokens in preventing CSRF attacks, examining their implementation, strengths, and potential vulnerabilities.
Explore strategies for managing heterogeneous stacks, combating ransomware, and leveraging ITaaS in effective disaster recovery planning.
Google addresses a security flaw in Quick Share that permitted unauthorized silent file transfers, enhancing user privacy and data protection.
Explore the security challenges posed by Active Directory’s 25-year legacy, highlighting vulnerabilities and the need for modern solutions.
Microsoft enhances Windows 11 Enterprise with hotpatching support, allowing seamless updates without rebooting, improving system uptime and efficiency.
Explore security control failures, their causes, and effective prevention strategies to enhance your organization’s cybersecurity resilience.
Cybercriminals target SSH vulnerabilities to deploy cryptojacking malware on Linux servers, compromising security and hijacking resources for cryptocurrency mining.
Discover how SSL misconfigurations can expose your website to security vulnerabilities and learn best practices to safeguard your online presence.