SecurityWeek

Rockwell Vulnerability Allowing Remote ICS Hacking Exploited in Attacks

CVE-2021-22681, an old vulnerability affecting ICS products from Rockwell Automation, has been exploited in attacks.
Infosecurity Magazine

Cloud Attackers Now Prefer Vulnerability Exploits Over Credentials, Google Cloud Finds

Google Cloud report details a sharp rise in attackers exploiting software vulnerabilities, including React2Shell ...

Google research warns hackers are targeting third parties and software flaws to gain entry

New Google report suggests cloud misconfigurations are on the decline, forcing crooks to pivot.

Google says 90 zero-days were exploited in attacks last year

Google Threat Intelligence Group (GTIG) tracked 90 zero-day vulnerabilities actively exploited throughout 2025, almost half of them in enterprise software and appliances.
Infosecurity-magazine.com

SAP Fixes Critical Vulnerability After Evidence of Exploitation

German software company SAP has finally disclosed and fixed a highly critical vulnerability in the NetWeaver Visual Composer development server after evidence of exploitation in the wild. NetWeaver ...
Hosted on MSN

Vulnerability exploitation: The dangers of the open LLM model boom

For a software vendor, telling the world about the latest security vulnerability is always a delicate balancing act. Customers need information quickly, starting with the flaw’s severity rating and ...
CSOonline

24% of vulnerabilities are abused before a patch is available

Exploited CVEs increased by a fifth in 2024, according to analysis by VulnCheck, with increased transparency and improved monitoring playing a role. Still, proactive measures are vital. Almost one in ...
CRN

Cisco Discloses Exploitation Of IOS Zero-Day Vulnerability

The high-severity flaw can be exploited to enable remote execution of code or denial of service, Cisco says. Cisco reported Wednesday that a zero-day vulnerability impacting its IOS and IOS XE ...
Network World

Cisco issues emergency patches for critical firewall vulnerabilities

Cisco has handed security teams one of the largest ever patching workloads affecting its firewall products, including fixes ...
Dark Reading

Disclosure Drama Clouds CrushFTP Vulnerability Exploitation

A critical CrushFTP vulnerability now under exploitation in the wild has become mired in controversy and confusion. On March 31, the Shadowserver Foundation reported that exploitation activity was ...
Forbes

Operational Benefits Of Virtual Patching

Austin Gadient is CTO & cofounder of Vali Cyber. Vali’s product ZeroLock protects hypervisors and Linux systems from cyber attacks. Many organizations are familiar with patching, the standard practice ...
Morningstar

RapidFort Raises $42M Series A Led by Blue Cloud Ventures and Forgepoint Capital to Power the Next Generation of Software Supply Chain Defense

RapidFort Raises $42M Series A Led by Blue Cloud Ventures and Forgepoint Capital to Power the Next Generation of Software Supply Chain Defense RapidFort, the technical leader defining the next ...