Security Bulletin

Integrating Phylum's technology would enable Veracode's Software Composition Analysis platform to accelerate identification and response to malicious packages in open-source libraries while providing customers with improved visibility on open-source...

Such figures represent a significant increase in government requests fulfilled by Telegram, which had only provided 108 users' information in response to 14 requests until September, when the messaging platform updated its privacy policy in aid of...

Low-code/no-code (LCNC) and robotic process automation (RPA) technologies allow companies to speed up development processes and reduce costs, but security is often overlooked. When this happens, the risks can outweigh the benefits.

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-0282 Ivanti Connect Secure Vulnerability These types of vulnerabilities are frequent attack vectors for malicious...

Ivanti released security updates to address vulnerabilities (CVE-2025-0282, CVE-2025-0283) in Ivanti Connect Secure, Policy Secure, and ZTA Gateways. A cyber threat actor could exploit CVE-2025-0282 to take control of an affected system. CISA has...

The southern African telco is the latest entity on the continent to have its critical infrastructure hacked, and attackers release sensitive info online when Telecom Namibia refuses to negotiate.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Attackers could remotely reset the router password and inject commands through the reset password page.

The deal will enhance 1Password Extended Access Management offering with capabilities to address challenges around software-as-a-service sprawl and shadow IT.

AI-based attacks have begun to outpace those against endpoint systems

Until September 2024, the encrypted messaging service acceded to 14 requests for user data from the US; that number jumped to 900 after its CEO was detained by French authorities in August.

The sprawling social media and gaming platform says that being considered a Chinese military business must be a mistake.