Security vulnerabilities remain the most common entry point for cyber attacks. This section tracks newly discovered CVEs, zero-day vulnerabilities, and actively exploited flaws affecting enterprise infrastructure, cloud environments, and software supply chains.
81 articles
New Kaspersky findings reveal shifts in industrial malware activity in Q3 2025. CISOs must address growing OT threat diversity and regional variances.
A new Webrat campaign disguises malware as fake exploit code on GitHub, targeting junior security professionals. CISOs must act to defend exposed endpoints.
Operation Sentinel led to 574 arrests in 19 African nations, crippling cybercrime networks behind BEC, ransomware, and digital fraud. CISOs must understand the regional and global implications.
Criminal IP and Palo Alto Networks Cortex XSOAR have joined forces to deliver AI-powered exposure intelligence directly into automated incident workflows. CISOs should prepare for faster incident response and higher fidelity decision-making with this new integration.
Cisco's Secure Email appliances are under active zero-day exploitation by a China-linked APT. This article outlines critical response measures and threat implications.
Cisco Talos' latest research exposes critical vulnerabilities in Libbiosig, Grassroot DiCoM, and Smallstep step-ca—putting medical and certificate systems at risk.
A critical flaw in Unisoc's SoC enables remote code execution via vehicle modems. CISOs must assess risks in modern connected fleets immediately.
A newly discovered zero-day in Chrome’s V8 engine is actively exploited in the wild. Google urges immediate patching to secure enterprise environments.
Microsoft’s December Patch Tuesday addresses 57 vulnerabilities, including three zero-days—one of which is actively exploited to hijack Windows systems.