Bug bounties have become a staple of the cyber security toolkit, offering researchers a way to get paid to find and report bugs and giving businesses a route to fix unknown flaws. However, this model ...

Google has released emergency security updates to patch two high-severity Chrome vulnerabilities exploited in zero-day ...

VEX helps public-sector security teams prioritize repairs by identifying which vulnerabilities affect their systems.

Data protection company Veeam Software has patched multiple flaws in its Backup & Replication solution, including four ...

Codex Security, formerly Aardvark⁠, has found hundreds of critical vulnerabilities in tested software in the past month.

All Intel processors since 2018 are affected by Branch Privilege Injection. The image shows an example of an Intel server system. Anyone who speculates on likely events ahead of time and prepares ...

The latest flaw in Cisco Systems Identity Services Engine (ISE), which could expose sensitive information to an attacker, requires rotation of credentials as well as ...

The European Union Agency for Cybersecurity (Enisa) has debuted a European Union Vulnerability Database (EUVD) to provide “aggregated, reliable and actionable” information on newly disclosed cyber ...

NetWeaver AS Java hole, rated severity 10, allows an unauthenticated attacker to execute arbitrary OS commands, and NTLM bug is rated likely for exploitation, warn security vendors. CISOs with SAP ...

Business has slowed considerably in the vulnerability management market segment, yet there are more vulnerabilities to contend with than ever before. When security mainstays experience the same harsh ...