A report from Binarly finds that a silently patched bug in a popular web server will likely live on in several major end-of-life products.

The National Vulnerability Database has ceased some of its work, but some experts fear the formation of a consortium to address its problems lacks sufficient urgency.

Nearly all commercially available computers are vulnerable to a flaw in the process used to display a logo upon start-up.

Researchers say Digital Communications Technologies has not addressed a bug impacting its Syrus4 IoT gateway, leaving open the possibility for vehicle fleets to be shut down.

The flaw in the widely used open source software package was expected to be the next great catastrophe in computer security.

Bugs found by Trellix researchers could allow for malicious hackers to gain access to sensitive sites like data centers.

Cybersecurity veteran Amit Yoran says Microsoft has a culture of toxic obfuscation when it comes to addressing security threats.

The debate is over whether the provision is unrealistic or if it's a game changing move to cut down on software vulnerabilities.

CISA's director has 90 days to respond to the suggestions.

Data from the Google-based team seems to reflect an industry getting faster at fixing bugs and deploying patches.