CISA says Known Exploited Vulnerabilities Catalog has helped federal agencies significantly accelerate their vulnerability remediation pace.
The post Faster Patching Pace Validates CISA’s KEV Catalog Initiative appeared first on SecurityWeek.
CISA says Known Exploited Vulnerabilities Catalog has helped federal agencies significantly accelerate their vulnerability remediation pace.
The post Faster Patching Pace Validates CISA’s KEV Catalog Initiative appeared first on SecurityWeek.
Apple has patched 3 zero-day vulnerabilities that have likely been exploited by a spyware vendor to hack iPhones.
The post Apple Patches 3 Zero-Days Likely Exploited by Spyware Vendor to Hack iPhones appeared first on SecurityWeek.
Atlassian has released patches for multiple high-severity vulnerabilities in Jira, Confluence, Bitbucket, and Bamboo products.
The post Atlassian Security Updates Patch High-Severity Vulnerabilities appeared first on SecurityWeek.
An automotive cybersecurity study shows that critical-risk vulnerabilities have decreased in the past decade.
The post Car Cybersecurity Study Shows Drop in Critical Vulnerabilities Over Past Decade appeared first on SecurityWeek.
Atos Unify product vulnerabilities could be exploited to cause disruption and reconfigure or backdoor the targeted system.
The post Atos Unify Vulnerabilities Could Allow Hackers to Backdoor Systems appeared first on SecurityWeek.
GitLab has released security updates to address a critical-severity vulnerability allowing an attacker to run pipelines as another user.
The post GitLab Patches Critical Pipeline Execution Vulnerability appeared first on SecurityWeek.
VulnCheck details a new fileless exploit targeting a recent Junos OS vulnerability that thousands of devices have not been patched against.
The post Thousands of Juniper Appliances Vulnerable to New Exploit appeared first on SecurityWeek.
Trend Micro has patched CVE-2023-41179, an Apex One zero-day code execution vulnerability that has been exploited in attacks.
The post Trend Micro Patches Exploited Zero-Day Vulnerability in Endpoint Security Products appeared first on SecurityWeek.
SecurityWeek interviews Casey Ellis, founder, chairman and CTO at Bugcrowd, best known for operating bug bounty programs for organizations.
The post Hacker Conversations: Casey Ellis, Hacker and Ringmaster at Bugcrowd appeared first on SecurityWeek.
Google Chromebooks released from 2021 and onwards will receive automatic updates, including security patches, for 10 years.
The post Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates appeared first on SecurityWeek.