Vulnerability Management

On April 7, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) added a new critical vulnerability, CVE-2025-3248, to its Known Exploited Vulnerabilities (KEV) Catalog....

A Looming Threat to Critical Business Systems. On April 22, 2025, cybersecurity firm ReliaQuest revealed an active exploitation campaign targeting SAP NetWeaver, the backbone...

A Critical Orchestration Misstep in Google Cloud. In March 2025, Tenable Research uncovered ConfusedComposer, a privilege escalation vulnerability in Google Cloud Platform (GCP) that...

A critical vulnerability in InstaWP Connect, a popular WordPress plugin with over 500,000 active installations, has exposed millions of websites to remote code execution...

U.S. government is set to discontinue funding for MITRE's Common Vulnerabilities and Exposures (CVE) program, effective April 16, 2025. Since 1999, this program has...

In April 2025, cybersecurity professionals were once again reminded of a harsh truth: patching is not optional it’s a frontline defense. Fortinet, a globally...

In today’s rapidly evolving digital landscape, artificial intelligence (AI) applications are pushing technological boundaries while simultaneously introducing new vulnerabilities. Recently, security researchers identified ten...