🚨 CISA KEV 2[−]
4 Apr KEVIvanti Releases Security Updates for Connect Secure, Policy Secure & ZTA Gateways Vulnerability (CVE-2025-22457)Ivanti released security updates to address vulnerabilities (CVE-2025-22457) in Ivanti Connect Secure, Policy Secure & ZTA Gateways. A cyber threat actor could exploit CVE-2025-22457 to take control of an affected system. CISA has added CVE-2025-22457 to its Known …CISA.GOV
4 Apr KEVCISA Adds One Vulnerability to the KEV CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2025-22457 Ivanti Connect Secure, Policy Secure and ZTA Gateways Stack-Based Buffer Overflow Vulnerability These types of vulnerabilitie…CISA.GOV
🐛 COMMON VULNERABILITIES AND EXPOSURES 1[−]
4 AprGoogle announces Sec-Gemini v1, a new experimental cybersecurity modelPosted by Elie Burzstein and Marianna Tishchenko, Sec-Gemini team Today, we’re announcing Sec-Gemini v1, a new experimental AI model focused on advancing cybersecurity AI frontiers. As outlined a year ago, defenders face the daunting task of securing against all cyber threa…SECURITY.GOOGLEBLOG.COM
⚠️ VULNERABILITY DISCLOSURE 2[−]
4 AprTaming the Wild West of ML: Practical Model Signing with SigstorePosted by Mihai Maruseac, Google Open Source Security Team (GOSST) In partnership with NVIDIA and HiddenLayer, as part of the Open Source Security Foundation , we are now launching the first stable version of our model signing library . Using digital signatures like those from Si…SECURITY.GOOGLEBLOG.COM
4 AprCapacity is Critical in Riskier Threat LandscapeInternational cooperation, reporting, and capacity building are critical to enhance cybersecurity defenses. Effective governance in an increasingly risky landscape requires visibility as well as coordinated vulnerability disclosure.TRENDMICRO.COM
🕵️ THREAT INTELLIGENCE 1[−]
4 AprCybersecurity Today: Unauthorized Scans, Signal App Usage, AI Image Risks, and a Missing ProfessorIn this episode, host Jim Love discusses a rise in unauthorized network scans targeting Juniper and Palo Alto devices, raising concerns about espionage and botnet activities. The podcast also delves into the controversial use of the Signal app by National Security Advisor Mike Wa…CYBERSECURITYTODAY.LIBSYN.COM
🌐 CYBER THREAT LANDSCAPE 1[−]
4 AprCyber Forensic Expert in 2,000+ Cases Faces FBI ProbeA Minnesota cybersecurity and computer forensics expert whose testimony has featured in thousands of courtroom trials over the past 30 years is facing questions about his credentials and an inquiry from the Federal Bureau of Investigation (FBI). Legal experts say the inquiry coul…KREBSONSECURITY.COM
📡 INFOSEC NEWS 2[−]
4 AprTrump fires head of National Security Agency and Cyber CommandHaugh’s firing has seemingly caught senior lawmakers by surpriseTECHCRUNCH.COM
4 AprHow to guard against NFC carding theft | Kaspersky official blogCybercriminals steal money through popular payment systems (Apple Pay, Google Wallet, and others) and even just holding a payment card to a smartphone. How to stay safe in 2025?KASPERSKY.COM