Skip to main content

Vulnerability Management

CVE-2025-0896: Orthanc Server Critical Vulnerability Overview

CVE-2025-0896: Orthanc Server Critical Vulnerability Overview

Orthanc Server is an open-source DICOM server for medical imaging, enabling efficient storage, retrieval, and sharing of medical data.

Analyst 207
Exploiting Vulnerabilities: Malicious ML Models on Hugging Face Use Flawed Pickle Format to Bypass Detection

Exploiting Vulnerabilities: Malicious ML Models on Hugging Face Use Flawed Pickle Format to Bypass Detection

Discover how malicious ML models exploit flawed Pickle formats on Hugging Face, enabling them to bypass detection and pose security risks.

Analyst 207
Microsoft Welcomes 2025 with 161 Security Updates

Microsoft Welcomes 2025 with 161 Security Updates

Microsoft kicks off 2025 with 161 security updates, enhancing protection and addressing vulnerabilities to ensure user safety and system integrity.

Analyst 207
UK Cyber Monitoring Centre Launches ‘Richter Scale’ for Assessing Cyber-Attacks

UK Cyber Monitoring Centre Launches ‘Richter Scale’ for Assessing Cyber-Attacks

UK Cyber Monitoring Centre introduces ‘Richter Scale’ to evaluate cyber-attacks, enhancing response strategies and national cybersecurity resilience.

Analyst 207
Critical Vulnerability in WordPress ASE Plugin Poses Security Risk to Websites

Critical Vulnerability in WordPress ASE Plugin Poses Security Risk to Websites

Critical vulnerability in WordPress ASE Plugin exposes websites to security risks, urging immediate updates to protect against potential attacks.

Analyst 207
Cisco Addresses Critical ISE Vulnerabilities Allowing Root Command Execution and Privilege Escalation

Cisco Addresses Critical ISE Vulnerabilities Allowing Root Command Execution and Privilege Escalation

Cisco has released updates to address critical ISE vulnerabilities that could allow root command execution and privilege escalation, enhancing security.

Analyst 207
The Future of PAM in Cybersecurity Leadership: Trends for 2025

The Future of PAM in Cybersecurity Leadership: Trends for 2025

Explore key trends shaping the future of Privileged Access Management (PAM) in cybersecurity leadership by 2025, enhancing security and governance.

Analyst 207
Hackers Target SimpleHelp RMM Vulnerabilities for Ongoing Access and Ransomware Attacks

Hackers Target SimpleHelp RMM Vulnerabilities for Ongoing Access and Ransomware Attacks

Hackers exploit SimpleHelp RMM vulnerabilities to gain persistent access, leading to increased ransomware attacks and security risks for businesses.

Analyst 207
Microsoft Discovers 3,000 Exposed ASP.NET Keys Vulnerable to Code Injection Attacks

Microsoft Discovers 3,000 Exposed ASP.NET Keys Vulnerable to Code Injection Attacks

Microsoft uncovers 3,000 exposed ASP.NET keys, highlighting vulnerabilities to code injection attacks and urging developers to enhance security measures.

Analyst 207
CISA Alerts on Ongoing Exploitation of Trimble Cityworks Vulnerability Resulting in IIS RCE

CISA Alerts on Ongoing Exploitation of Trimble Cityworks Vulnerability Resulting in IIS RCE

CISA warns of ongoing exploitation of a Trimble Cityworks vulnerability leading to IIS remote code execution. Stay informed and secure your systems.

Analyst 207
Veeam Vulnerability Enables Arbitrary Code Execution Through Man-in-the-Middle Attack

Veeam Vulnerability Enables Arbitrary Code Execution Through Man-in-the-Middle Attack

Veeam vulnerability allows arbitrary code execution via a man-in-the-middle attack, posing significant security risks for affected systems.

Analyst 207
Future-Proofing IT: Essential Trends in Vulnerability Management

Future-Proofing IT: Essential Trends in Vulnerability Management

Discover essential trends in vulnerability management to future-proof your IT strategy and safeguard against evolving cyber threats.

Analyst 207
CISA Warns of Four Critical Vulnerabilities in KEV Catalog, Recommends Fixes by February 25

CISA Warns of Four Critical Vulnerabilities in KEV Catalog, Recommends Fixes by February 25

CISA alerts on four critical vulnerabilities in the KEV Catalog, urging organizations to implement fixes by February 25 to enhance cybersecurity.

Analyst 207