55Articles
9Categories
2025-04-16Date
🚨
CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2021-20035  SonicWall SMA100 Appliances OS Command Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malic…
KEV
🐛
CVE Program Almost Unfunded
🐛
Funding Expires for Key Cyber Vulnerability Database
🐛
U.S. Govt. Funding for MITRE's CVE Ends April 16, Cybersecurity Community on Alert
🐛
MY TAKE: The CVE program crisis isn’t over — it’s a wake-up call for cybersecurity’s supply chain
🐛
CVE program averts swift end after CISA executes 11-month contract extension
🐛
The CVE program for tracking security flaws is about to lose federal funding
🐛
Homeland Security funding for CVE program expires
🐛
Risky Business #788 -- Trump targets Chris Krebs, SentinelOne
⚠️
New Windows Task Scheduler Bugs Let Attackers Bypass UAC and Tamper with Logs
⚠️
From Third-Party Vendors to U.S. Tariffs: The New Cyber Risks Facing Supply Chains
⚠️
Apple Patches Exploited Vulnerability, (Wed, Apr 16th)
⚠️
CISA Releases Guidance on Credential Risks Associated with Potential Legacy Oracle Cloud Compromise
⚠️
AI-Powered Spear Phishing Can Now Outperform Human Attackers
⚠️
Apple says zero-day bugs exploited against ‘specific targeted individuals’ using iOS
⚠️
Insurance firm Lemonade warns of breach of thousands of driving license numbers
⚠️
Whistleblower alleges Russian IP address attempted access to US agency’s systems via DOGE-created accounts
⚠️
Cato Networks augments CASB with genAI security
⚠️
Online-Betrüger setzen auf KI und synthetische Identitäten
⚠️
Überwachungssoftware infiziert gezielt Smartphones
⚠️
CISOs rethink hiring to emphasize skills over degrees and experience
⚠️
The most dangerous time for enterprise security? One month after an acquisition
⚠️
US Gov Funding Expires for MITRE- Cyber Vulnerability Database
⚠️
GCVE: Global CVE Allocation System
⚠️
ActiveX blocked by default in Microsoft 365 because remote code execution is bad, OK?
⚠️
GCVE: Global CVE Allocation System
⚠️
Windows 11 Escalation Vulnerability Let Attackers Gain Admin Access Within 300 Milliseconds
⚠️
Oracle Security Update - Patch for 378 Vulnerabilities Including Remote Exploits
📢
Identity Theft and Tax Records, Purchasing Fake IDs for Hacker Forums and more: Cyber Security Today for April 16, 2025
📢
CISA Statement on CVE Program
📢
Former CISA director Chris Krebs vows to fight back against Trump-ordered federal investigation
📢
Renewed Russian Phishing Campaign Against European Diplomats
📢
Renewed Russian Phishing Campaign Against European Diplomats
🔥
The Sophos Annual Threat Report: Cybercrime on Main Street 2025
🔥
New BPFDoor Controller Enables Stealthy Lateral Movement in Linux Server Attacks
🔥
Product Walkthrough: A Look Inside Wing Security's Layered SaaS Identity Defense
🔥
How Does Human Risk Management Differ from Security Awareness Training?
🔥
News alert: SquareX to present on uncovering data splicing attacks at BSides San Francisco 2025
🔥
CrazyHunter Campaign Targets Taiwanese Critical Sectors
🔥
Erneuter Datenabfluss bei Melting Mind?
🕵️
Gamma AI Platform Abused in Phishing Chain to Spoof Microsoft SharePoint Logins
🕵️
ISC Stormcast For Wednesday, April 16th, 2025 https://isc.sans.edu/podcastdetail/9410, (Wed, Apr 16th)
🕵️
Cyber Signals Issue 9 | AI-powered deception: Emerging fraud threats and countermeasures
🕵️
Researchers claim breakthrough in fight against AI’s frustrating security hole
🕵️
What are You Working on Wednesday
🕵️
Vulnerabilities in the SS7 phone system can allow attackers to steal your calls and texts, track your location
🕵️
CVE program gets a last-minute save, maybe a new home
🕵️
UK Software Firm Exposed 1.1TB of Healthcare Worker Records
🌐
Sophos Annual Threat Report appendix: Most frequently encountered malware and abused software
🌐
Chinese Android Phones Shipped with Fake WhatsApp, Telegram Apps Targeting Crypto Users
🌐
NSO lawyer names Mexico, Saudi Arabia, and Uzbekistan as spyware customers accused of 2019 WhatsApp hacks
🌐
They’re coming for your data: What are infostealers and how do I stay safe?
🎙️
Smashing Security podcast #413: Hacking the hackers… with a credit card?
📡
Sophos India Volunteers Bring Color to Local Schools
📡
Google Blocked 5.1B Harmful Ads and Suspended 39.2M Advertiser Accounts in 2024