Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known ...

A critical flaw found in the open source Langflow platform was added to the US Cybersecurity and Infrastructure Security Agency’s (CISA's) Known Exploited Vulnerabilities (KEV) catalog. Langflow is a ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until Friday to patch an actively ...

The rapid development of advanced frontier models has set the cyber world up for the next security crisis: Troves of software ...

Anthropic’s Mythos Preview found 23,019 candidate vulnerabilities in open-source projects, exposing a widening gap between AI bug discovery and enterprise patching.

BeyondTrust has urged customers to patch two critical Authentication Bypass vulnerabilities, tracked as CVE-2026-40138 and CVE-2026-40139, affecting its Remote Support (RS) and Privileged Remote ...

According to Verizon's 2024 Data Breach Investigations Report, cyberattacks and data breaches involving the exploitation of vulnerabilities have almost tripled compared to previous years. Our recent ...

The U.S. cybersecurity agency issued an advisory giving government agencies just four days to remediate an exploited vulnerability affecting Ivanti Endpoint Manager Mobile. The U.S. Cybersecurity and ...

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a new directive that will now require federal agencies to patch known exploited vulnerabilities within specific time frames.

Rapid7, Inc. has announced the launch of Active Patching, an automated patching and remediation solution integrated into its Exposure Command platform, designed to enhance security for IT teams. As ...

For years, patch management has been one of the least glamorous yet most consequential aspects of IT operations. Vulnerabilities emerge daily, and while most administrators know the importance of ...

Update, Dec. 07, 2024: This story, originally published Dec. 06 now includes a statement from Microsoft about the new Windows zero-day vulnerability and further information about the 0patch ...