Three 10.0 security flaws fixed across Ubiquiti’s UniFi line
Ubiquiti has patched 21 critical vulnerabilities, three of which were rated the highest severity possible, the communications product company said Wednesday in a security bulletin.…
Latest Cybersecurity News — Page 45
View all →
Industrial threat report for Q2 2026
All threats In Q2 2026, the percentage of ICS computers on which malicious objects were blocked continued to decrease, falling to 19.15%, its lowest level…
Critical infrastructure’s long, undefended tail exposed by UK energy attack
The same connection can expose equipment designed decades ago, when its manufacturers never contemplated that it would face internet-based attackers. “The thing that brought the…
Trump issues EO 14420 to secure US bulk-power systems from foreign equipment, cybersecurity risks
U.S. President Donald Trump declared a national emergency over foreign supply of bulk-power system electric equipment, citing risks that foreign actors could create or exploit…
CISA Vulnerability Review flags CVE data gaps, common weaknesses; urges Secure by Design to address vulnerability root causes
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday published its CISA Vulnerability Review, which examines the root causes of insecure software and basic…
3 Critical CVEs in Palo Alto Networks Expedition
Palo Alto Networks’ Expedition tool contains multiple critical vulnerabilities (CVE-2024-9463, CVE-2024-9464, CVE-2024-9465, CVE-2024-9466, CVE-2024-9467), including OS command injection, SQL injection, cleartext storage of sensitive information,…
Recorded Future Launches AI Alert Filtering
AI Alert Filtering is now available. Powered by Recorded Future AI, it automates the first pass of filtering Alerts by relevance so analysts prioritize faster…
Microsoft Sentinel detection rules: automatic migration to Elastic
Elastic automatically translates your Microsoft Sentinel detection rules into Elastic Security. Export your Scheduled and Near Real Time (NRT) analytics rules from Sentinel, upload them,…
CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch their Citrix NetScaler appliances against an actively exploited vulnerability by Saturday.…
Veeam Backup & Replication Flaw Exposes Guest OS Credentials in Cleartext Logs
Veeam has disclosed a critical security vulnerability in Veeam ONE 13 that could allow an unauthenticated remote attacker to coerce SMB authentication from the product’s…
CISA Warns of Actively Exploited Microsoft SQL Server RCE Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2019-1068, a remote code execution vulnerability affecting Microsoft SQL Server, to its Known Exploited Vulnerabilities…
FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate
The Justice Department and FBI have seized domains tied to two hacking tools built and run by a Chinese state-sponsored group, cutting off access to…