Senator Presses NSA to Update VPN Guidance as Single-Hop Architecture Draws Scrutiny
Ron Wyden has written to the NSA Director asking for clearer public advice on commercial…
Tag: compliance
CISA Adds Six Actively Exploited Vulnerabilities Spanning Microsoft, Linux, Red Hat and Citrix
The US cybersecurity agency's Known Exploited Vulnerabilities catalogue grew by six entries on 26 August,…
CISA mandates three-day patch window for actively exploited Zimbra vulnerability
A known flaw in Zimbra Collaboration Suite is under active exploitation, prompting CISA to issue…
CISA Confirms Active Exploitation of Critical Windows IKE Remote Code Execution Flaw
A critical-severity RCE vulnerability in the Windows Internet Key Exchange Service Extensions component is being…
Unisoc VoLTE Exploit Chain Delivers Full Android Kernel Access With No Vendor Fix
A two-stage exploit published by SSD Secure Disclosure achieves kernel-level compromise on Unisoc-powered Android devices…
CISA Confirms Active Exploitation of Critical Progress Kemp LoadMaster Vulnerability
A command injection flaw in a widely deployed load balancer has moved from disclosed to…
CISA Orders Federal Agencies to Patch Langflow, N-central and Apache Tomcat Within Three Days
Three actively exploited vulnerabilities across widely deployed platforms are now on CISA's Known Exploited Vulnerabilities…
CISA Issues Fresh SBOM Guidance. Did They Get It Right?
What security leaders need to know about the affected systems.
Senator Calls on Federal Agencies to Retire Legacy Public-Facing VPNs
A formal letter to OMB, CISA and NIST urges binding directives, procurement rule changes and…
Russian Espionage Group Exploited Zimbra Zero-Day to Harvest Email and Recovery Codes
A state-linked Russian group spent months silently reading Western inboxes by exploiting an unknown vulnerability…