Items Tagged with 'vulnerability'

The patch tsunami is here, and browsers are absorbing the worst of it.

Only 9% remediate high-severity flaws in production within 24 hours; 74% do so in one to seven days. 

CISA announced that it will be accepting nominations to its Known Exploited Vulnerabilities (KEV) catalog. 

The Mythos threat is arriving at exactly the wrong moment for most enterprises. 

U.S. cyber officials are considering shortening the deadline for fixing critical vulnerabilities in government IT, and security experts are sharing their thoughts. 

While vulnerability management and patching remain necessary, they are not sufficient to address the new reality that Mythos represents.

NIST recently changed how it handles CVEs. 

According to research from two ethical hackers, Restaurant Brands International (RBI) has security flaws that could enable a malicious actor to remotely eavesdrop on orders in the drive-through. 

CISA has announced the addition of two vulnerabilities to its Known Exploited Vulnerabilities catalog.

An Apache ActiveMQ flaw is being actively exploited. Then, it’s being patched by the actors who leveraged it.