Dive Brief: SonicWall on Tuesday disclosed that an OS command-injection vulnerability in SonicWall SMA100 remote-access appliances, tracked as CVE-2021-20035, has been exploited in the wild.…
The Cybersecurity and Infrastructure Security Agency on Wednesday said organizations and individuals should take steps to protect their environments from a potential compromise of a…
Two federal lawmakers today introduced a bi-partisan bill that preserves key regulation that facilitates the sharing of cyber-threat data between private companies and the federal…
The Cybersecurity and Infrastructure Security Agency said it reached an agreement to renew funding for a software vulnerability program that is used by the information…
The Cybersecurity and Infrastructure Security Agency is in the process of a major push to eliminate jobs, starting with a voluntary resignation program, part of…
Dive Brief: Huntress on Monday published research that showed exploitation of CVE-2025-30406, a deserialization vulnerability in Gladinet’s CentreStack enterprise file-sharing platform for managed service providers…
Hertz Corp. confirmed a threat actor gained access to sensitive personal data in a breach linked to vulnerabilities in Cleo file-transfer software, according to a…
Dive Brief: The aviation industry is facing significant threats to its ability to maintain cyber resilience and must address key issues ranging from aging technology,…
Dive Brief: The Shadowserver Foundation reported Saturday that more than 14,000 Fortinet devices across the globe have been compromised by a threat actor that exploited…
The shift in how we work has brought efficiencies and operational enhancements, but it also added complexity, created new attack vectors, and exacerbated existing security…
Dive Brief: Remote access tools were the initial entry point in eight of every 10 ransomware attacks in 2024, according to a report released Thursday by…
Dive Brief: Fortinet detailed new exploitation activity against known critical vulnerabilities in FortiGate devices, including CVE-2022-42475, CVE-2023-27997 and CVE-2024-21762, in a Thursday blog post.. Fortinet said that…
