Update, March 22, 2025: This story, originally published March 20, has been updated with expert commentary from infosecurity professionals regarding the latest critical Google Chrome vulnerability ...

The vulnerability — which had been disclosed Tuesday and is known to have been exploited in attacks — initially affected more than 41,000 servers, according to researchers at Shadowserver. A ...

Update, May 11, 2025: This story, originally published May 9, has been updated with more details on the move towards greater cloud Common Vulnerabilities and Exposures (CVE) transparency by both ...

Today is Microsoft's December 2024 Patch Tuesday, which includes security updates for 71 flaws, including one actively exploited zero-day vulnerability. This Patch Tuesday fixed sixteen critical ...

Today is Microsoft's April 2025 Patch Tuesday, which includes security updates for 134 flaws, including one actively exploited zero-day vulnerability. This Patch Tuesday also fixes eleven "Critical" ...

Three critical vulnerabilities in Ivanti software have recently been added to the US Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) catalog. In a new ...

Multiple industrial control system (ICS) devices are affected by vulnerabilities carrying critical severity ratings up to a 9.9 CVSS base score. In an April 10 blog post, Cyble urged users of Rockwell ...

Heap-based buffer overflow in Windows rated 9.8 in severity and SharePoint RCE flaw also need immediate attention. Microsoft’s July Patch Tuesday fixes are a mix of good news and bad news for CSOs: ...