Security News

Intruder Launches Intel: A Free Vulnerability Intelligence Platform For Staying Ahead of the Latest Threats
2024-11-26 11:30

When CVEs go viral, separating critical vulnerabilities from the noise is essential to protecting your organization. That’s why Intruder, a leader in attack surface management, built Intel - a...

Oracle Warns of Agile PLM Vulnerability Currently Under Active Exploitation
2024-11-20 04:24

Oracle is warning that a high-severity security flaw impacting the Agile Product Lifecycle Management (PLM) Framework has been exploited in the wild. The vulnerability, tracked as CVE-2024-21287...

Oracle patches exploited Agile PLM vulnerability (CVE-2024-21287)
2024-11-19 10:43

Oracle has released a security patch for CVE-2024-21287, a remotely exploitable vulnerability in the Oracle Agile PLM Framework that is, according to Tenable researchers, being actively exploited...

Urgent: Critical WordPress Plugin Vulnerability Exposes Over 4 Million Sites
2024-11-18 04:52

A critical authentication bypass vulnerability has been disclosed in the Really Simple Security (formerly Really Simple SSL) plugin for WordPress that, if successfully exploited, could grant an...

PAN-OS Firewall Vulnerability Under Active Exploitation – IoCs and Patch Released
2024-11-16 08:21

Palo Alto Networks has released new indicators of compromise (IoCs) a day after the network security vendor confirmed that a zero-day vulnerability impacting its PAN-OS firewall management...

Amazon confirms employee data exposed in leak linked to MOVEit vulnerability
2024-11-12 13:29

Over 5 million records from 25 organizations posted to black hat forum Amazon employees' data is part of a stolen trove posted to a cybercrime forum linked to last year's MOVEit vulnerability.…

Setting a security standard: From vulnerability to exposure management
2024-11-11 04:30

Vulnerability management has been the standard approach to fending off cyber threats for years. Still, it falls short by focusing on a limited number of vulnerabilities, often resolving only 1% to...

Week in review: Zero-click flaw in Synology NAS devices, Google fixes exploited Android vulnerability
2024-11-10 09:00

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443) Synology has...

Palo Alto Networks warns of potential PAN-OS RCE vulnerability
2024-11-08 17:42

Palo Alto Networks warned customers to restrict access to their next-generation firewalls because of a potential remote code execution vulnerability in the PAN-OS management interface. [...]

Top Vulnerability Management Tools: Reviews & Comparisons 2024
2024-11-08 08:13

There are a great many vulnerability management tools available. But which is best? Here are our top picks for a variety of use cases.