Latest Vulnerability Management news

22,500 Palo Alto firewalls "possibly vulnerable" to ongoing attacks

Approximately 22,500 exposed Palo Alto GlobalProtect firewall devices are likely vulnerable to the CVE-2024-3400 flaw, a critical command injection vulnerability that has been actively exploited in attacks since at least March 26, 2024.
- Bill Toulas
- April 19, 2024
- 11:27 AM
- 0
Over 13,000 Ivanti gateways vulnerable to actively exploited bugs

Thousands of Ivanti Connect Secure and Policy Secure endpoints remain vulnerable to multiple security issues first disclosed more than a month ago and which the vendor gradually patched.
- Bill Toulas
- February 15, 2024
- 10:30 AM
- 0
CISA warns agencies of fourth flaw used in Triangulation spyware attacks

The U.S. Cybersecurity and Infrastructure Security Agency has added to its to the Known Exploited Vulnerabilities catalog six vulnerabilities that impact products from Adobe, Apache, D-Link, and Joomla.
- Bill Toulas
- January 09, 2024
- 02:32 PM
- 0
CISA offers free security scans for public water utilities

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has announced it is offering free security scans for critical infrastructure facilities, such as water utilities, to help protect these crucial units from hacker attacks.
- Bill Toulas
- September 12, 2023
- 01:02 PM
- 0
Google releases dev tool to list vulnerabilities in project dependencies

Google has launched OSV Scanner, a new tool that allows developers to scan for vulnerabilities in open-source software dependencies used in their project.
- Bill Toulas
- December 13, 2022
- 01:00 PM
- 0
Google Project Zero: Vendors are now quicker at fixing zero-days

Google's Project Zero has published a report showing that organizations took less time to address the zero-day vulnerabilities that the team reported last year.
- Bill Toulas
- February 11, 2022
- 12:40 PM
- 0
Hackers scan for vulnerable devices minutes after bug disclosure

Every hour, a threat actor starts a new scan on the public web for vulnerable systems, moving at a quicker pace than global enterprises when trying to identify serious vulnerabilities on their networks.
- Ionut Ilascu
- May 19, 2021
- 08:57 AM
- 0

22,500 Palo Alto firewalls "possibly vulnerable" to ongoing attacks

Over 13,000 Ivanti gateways vulnerable to actively exploited bugs

CISA warns agencies of fourth flaw used in Triangulation spyware attacks

CISA offers free security scans for public water utilities

Google releases dev tool to list vulnerabilities in project dependencies

Google Project Zero: Vendors are now quicker at fixing zero-days

Hackers scan for vulnerable devices minutes after bug disclosure