Add Yahoo as a preferred source to see more of our stories on Google. The Microsoft Threat Intelligence Center (MSTIC) and Microsoft Security Response Center (MSRC) has published a new in-depth report ...

Many hackers are opportunistic and often attempt to exploit security gaps to launch an attack days before a vulnerability is disclosed. According to a new report published on July 31 by GreyNoise, ...

The majority (53%) of attributed vulnerability exploits in the first half 2025 were conducted by state-sponsored actors for strategic, geopolitical purposes, according to a new report by Recorded ...

State and local government IT teams face a constant flood of vulnerability alerts. With tens of thousands of new common vulnerabilities and exposures (CVEs) published every year, security teams must ...

What good is a fix if you don't use it? Experts are urging security teams to patch promptly as vulnerability exploits now account for the majority of intrusions, according to the latest figures.… ...

Over the weekend, security experts were beginning to panic. MITRE announced that the US government had not renewed funding for the Common Vulnerabilities and Exposures (CVE) database. MITRE VP Yosry ...

Microsoft warns CVE-2025-29824 lets attackers with user access escalate privileges to deploy ransomware via a flaw in Windows CLFS. Microsoft has detected a zero-day vulnerability in the Windows ...

The tenor of boardroom discussions about cybersecurity is changing. In some of the recent meetings I’ve been a part of, directors are no longer asking CISOs, “Are we secure?” They are asking, “How ...

EINDHOVEN, the Netherlands—IQSIGHT, formerly known as Bosch Video Systems, has been designated a Common Vulnerability and Exposures (CVE) Numbering Authority (CNA), enabling the company to assign ...

A pair of researchers conducting a six-month survey of popular business printers discovered 49 vulnerabilities in the drivers and software running on the devices. Some of the issues could be remotely ...

CVSS gives you the number, but context gives you the danger: It’s how vulnerabilities spread through trusted systems that really matters. The common vulnerability scoring system (CVSS) has long served ...

Microsoft said it observed a threat actor known as Storm-2460 abuse a use after free flaw in Windows Common Log File System Driver The flaw is used to deploy PipeMagic, which is then used to deliver ...