The missing cybersecurity leader in small businessCyberScoop·May 11, 10:00 UTC · May 11, 2026Vulnerability55
Friday Squid Blogging: Giant Squid Live in the Waters of Western AustraliaSchneier on Security·May 8, 21:03 UTC · May 8, 2026Vulnerability30
US, UK agencies warn hackers were hiding on Cisco firewalls long after patches were appliedCyberScoop·Apr 23, 20:25 UTC · Apr 23, 2026Vulnerability in the wildCVE-2025-20333CVE-2025-2036260
Vuln in Google’s Antigravity AI agent manager could escape sandbox, give attackers remote code executionCyberScoop·Apr 21, 15:43 UTC · Apr 21, 2026Vulnerability in the wild60
Mythos can find the vulnerability. It can't tell you what to do about it.CyberScoop·Apr 21, 10:00 UTC · Apr 21, 2026Vulnerability in the wild160
Friday Squid Blogging: New Giant Squid VideoSchneier on Security·Apr 17, 21:05 UTC · Apr 17, 2026Vulnerability30
NIST narrows scope of CVE analysis to keep up with rising tide of vulnerabilitiesCyberScoop·Apr 15, 20:17 UTC · Apr 15, 2026Vulnerability in the wild60
Tech giants launch AI-powered ‘Project Glasswing’ to identify critical software vulnerabilitiesCyberScoop·Apr 7, 19:35 UTC · Apr 7, 2026Vulnerability in the wild60
Patch now: TP-Link Archer NX routers vulnerable to firmware takeoverSecurity Affairs·Mar 25, 14:44 UTC · Mar 25, 2026Vulnerability in the wildCVE-2025-15517CVE-2025-15605CVE-2025-9377+1 CVEs60
Cisco’s latest vulnerability spree has a more troubling pattern underneathCyberScoop·Mar 18, 21:31 UTC · Mar 18, 2026Vulnerability in the wildCVE-2026-20127CVE-2022-20775CVE-2026-20122+6 CVEs60
Washington is right: Cybercrime is organized crime. Now we need to shut down the business modelCyberScoop·Mar 16, 10:00 UTC · Mar 16, 2026Vulnerability55
Microsoft’s monthly Patch Tuesday is first in 6 months with no actively exploited zeroCyberScoop·Mar 10, 19:37 UTC · Mar 10, 2026Vulnerability in the wildCVE-2026-21262CVE-2026-26127CVE-2026-23668+8 CVEs60
Researchers discover suite of agentic AI browser vulnerabilitiesCyberScoop·Mar 3, 20:58 UTC · Mar 3, 2026Vulnerability in the wild60
Vulnerabilities grew like weeds in 2025, but only 1% were weaponized in attacksCyberScoop·Feb 25, 13:30 UTC · Feb 25, 2026Vulnerability in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49706+1 CVEs60
The Caracas operation suggests cyber was part of the planCyberScoop·Feb 19, 11:00 UTC · Feb 19, 2026Vulnerability30
As feds pull back, states look inward for election security supportCyberScoop·Feb 4, 21:37 UTC · Feb 4, 2026Vulnerability55
GCVE launches as a decentralized system for tracking software vulnerabilitiesCyberScoop·Jan 22, 20:45 UTC · Jan 22, 2026VulnerabilityCVE-2023-4022460
CISA’s secure-software buying tool had a simple XSS vulnerability of its ownCyberScoop·Jan 15, 22:47 UTC · Jan 15, 2026Vulnerability in the wild160
Microsoft Patch Tuesday addresses 112 defects, including one actively exploited zeroCyberScoop·Jan 13, 23:24 UTC · Jan 13, 2026Vulnerability in the wildCVE-2026-20805CVE-2026-20947CVE-2026-20963+4 CVEs60
ServiceNow patches critical AI platform flaw that could allow user impersonationCyberScoop·Jan 13, 15:47 UTC · Jan 13, 2026VulnerabilityCVE-2025-1242060
Veeam issues patch to close critical remote code execution flawCyberScoop·Jan 7, 15:33 UTC · Jan 7, 2026VulnerabilityCVE-2025-5947060
Microsoft’s last Patch Tuesday of 2025 addresses 57 defects, including one zeroCyberScoop·Dec 9, 20:53 UTC · Dec 9, 2025Vulnerability in the wildCVE-2025-62221CVE-2025-62456CVE-2025-64678+8 CVEs60
Developers scramble as critical React flaw threatens major appsCyberScoop·Dec 3, 19:23 UTC · Dec 3, 2025Vulnerability in the wildCVE-2025-55182CVE-2025-6647860
Google addresses 107 Android vulnerabilities, including two zeroCyberScoop·Dec 1, 22:17 UTC · Dec 1, 2025Vulnerability in the wildCVE-2025-48633CVE-2025-48572CVE-2025-4863160
The slow rise of SBOMs meets the rapid advance of AICyberScoop·Nov 24, 19:51 UTC · Nov 24, 2025Vulnerability155
Information sharing law’s expiration could squander government vulnerability hunting efforts, senator saysCyberScoop·Nov 18, 21:50 UTC · Nov 18, 2025Vulnerability in the wild60
Microsoft Patch Tuesday addresses 63 defects, including one actively exploited zeroCyberScoop·Nov 11, 20:49 UTC · Nov 11, 2025Vulnerability in the wildCVE-2025-62215CVE-2025-60724CVE-2025-60719+2 CVEs60
The U.S. Cyber Trust Mark set to launchHelp Net Security·Nov 5, 10:59 UTC · Nov 5, 2025Vulnerability30
Apple addresses more than 100 vulnerabilities in security updates for iPhones, Macs and iPadsCyberScoop·Nov 4, 20:28 UTC · Nov 4, 2025Vulnerability in the wild60
Exclusive: OpenAI’s Atlas browser — and others — can be tricked by manipulated web contentCyberScoop·Oct 28, 18:27 UTC · Oct 28, 2025Vulnerability42
Attackers bypass patch in deprecated Windows Server update toolCyberScoop·Oct 27, 20:03 UTC · Oct 27, 2025Vulnerability in the wildCVE-2025-5928760
F5 vulnerability highlights weak points in DHS’s CDM programCyberScoop·Oct 23, 13:52 UTC · Oct 23, 2025Vulnerability42
Researchers uncover remote code execution flaw in abandoned Rust code libraryCyberScoop·Oct 21, 20:25 UTC · Oct 21, 2025VulnerabilityCVE-2025-62518160
Behind the struggle for control of the CVE programCyberScoop·Oct 20, 14:55 UTC · Oct 20, 2025Vulnerability55
Microsoft’s Patch Tuesday fixes 175 vulnerabilities, including two actively exploited zeroCyberScoop·Oct 14, 18:36 UTC · Oct 14, 2025Vulnerability in the wildCVE-2025-24990CVE-2025-59230CVE-2025-55315+3 CVEs60
Anthropic touts safety, security improvements in Claude Sonnet 4.5CyberScoop·Sep 30, 16:34 UTC · Sep 30, 2025Vulnerability55
Cisco uncovers new SNMP vulnerability used in attacks on IOS devicesCyberScoop·Sep 25, 14:57 UTC · Sep 25, 2025Vulnerability in the wildCVE-2025-20352CVE-2025-20240CVE-2025-2014960
Researchers say media outlet targeting Moldova is a Russian cutoutCyberScoop·Sep 23, 21:26 UTC · Sep 23, 2025Vulnerability42
Apple addresses dozens of vulnerabilities in latest software for iPhones, iPads and MacsCyberScoop·Sep 16, 18:54 UTC · Sep 16, 2025Vulnerability in the wildCVE-2025-43300CVE-2025-43298CVE-2025-4330460