The Trump administration hopes the program will accelerate the discovery and fixing of serious technical problems before hackers exploit them.
Related Articles
All CyberSecurityDive →
Critical Apache Tomcat RCE vulnerability exploited
Dive Brief: Researchers from GreyNoise on Thursday reported active exploitation of CVE-2025-24813, a critical remote code execution vulnerability in Apache Tomcat web server software. The path…
CISA adds Ivanti Connect Secure vulnerability to KEV catalog
Dive Brief: CISA on Friday added CVE-2025-22457, a critical stack-based buffer-overflow flaw that affects several Ivanti products, to the agency’s known exploited vulnerabilities catalog. Ivanti…
Victoria’s Secret shuts down website in response to security incident
Victoria’s Secret has shut down its website due to a security incident. The lingerie retailer has also paused some in-store services and has temporarily halted its…
Conduent warns of further financial fallout from cyberattack
Conduent said it may face additional financial risks related to a January 2025 attack that impacted a number of state governments and other organizations. The…
Microsoft Power Pages vulnerability exploited in the wild
A zero-day vulnerability in Microsoft Power Pages has been exploited in the wild. The vulnerability, listed as CVE-2025-24989, is an improper access control flaw that…
Ransomware gangs capitalize on law enforcement takedowns of competitors
Listen to the article 3 min This audio is auto-generated. Please let us know if you have feedback. Dive Brief: Several major ransomware-as-a-service groups have…