Security vulnerabilities remain the most common entry point for cyber attacks. This section tracks newly discovered CVEs, zero-day vulnerabilities, and actively exploited flaws affecting enterprise infrastructure, cloud environments, and software supply chains.
81 articles
Cisco refines its vulnerability disclosure strategy to prioritize high-risk issues amid AI-driven acceleration in detections. CISOs must adapt to evolving disclosure practices.
CrowdStrike uncovered significant security vulnerabilities in AI-generated code linked to politically sensitive prompts in Chinese AI models. CISOs must evaluate AI coding tools to mitigate emerging threats.
Mozilla’s Firefox 151 brings substantial privacy upgrades including stronger anti-fingerprinting and local network access controls, alongside crucial security fixes. CISOs should prioritize patching to mitigate emerging threat vectors.
Microsoft is revising its Edge browser’s password management to avoid storing all credentials as plaintext in memory at startup, improving protection against memory scraping attacks.
Linux kernel maintainers have proposed a kill switch feature that allows disabling vulnerable functions temporarily before patches are deployed, triggering extensive debate on operational risks and benefits. CISOs must evaluate this new tool's potential impact on enterprise security posture.
A newly disclosed Linux kernel vulnerability allows trivial local privilege escalation, threatening multi-tenant and containerized environments. CISOs must act swiftly to monitor and patch critical systems.
A misconfigured Microsoft Entra ID role allowed privilege escalation via service principal ownership. This cybersecurity report explains risks and mitigation steps for CISOs.
Framework’s Laptop 13 Pro, nicknamed the “MacBook Pro for Linux users,” pushes modular Windows laptop innovation, challenging enterprise security paradigms.
Vulnerabilities are now weaponized faster than ever, collapsing traditional patch windows. CISOs must understand this evolving threat landscape and act decisively.
The 2025 Talos Year in Review outlines rapid weaponization of vulnerabilities, pervasive identity abuse, and ransomware trends shaping the cyber threat landscape. CISOs must prioritize adaptive defenses in response.
Apple released a silent Background Security Improvement patch addressing a critical WebKit vulnerability that could allow malicious sites to bypass data isolation protections.
Allama introduces a powerful open-source AI-based security automation platform that streamlines threat detection and response for SOC teams and CISOs, integrating over 80 tools to optimize security operations.