The program warns organizations running software or hardware with vulnerabilities that are being exploited by ransomware gangs.

A report from Binarly finds that a silently patched bug in a popular web server will likely live on in several major end-of-life products.

The National Vulnerability Database has ceased some of its work, but some experts fear the formation of a consortium to address its problems lacks sufficient urgency.

Researchers found 97 zero-days exploited in the wild in 2023; nearly two thirds of mobile and browser flaws were used by spyware firms.

The software company pushed back on the joint advisory, which comes following multiple directives from CISA this year prodding agencies to patch against Ivanti exploits.

Nearly all commercially available computers are vulnerable to a flaw in the process used to display a logo upon start-up.

Researchers say Digital Communications Technologies has not addressed a bug impacting its Syrus4 IoT gateway, leaving open the possibility for vehicle fleets to be shut down.

The list includes well-known vulnerabilities impacting Fortinet's VPNs and Log4Shell that hackers still routinely exploit.

Cybersecurity veteran Amit Yoran says Microsoft has a culture of toxic obfuscation when it comes to addressing security threats.

Repeated breaches of cloud computing services makes understanding a recent incident affecting Microsoft essential.