Common Vulnerabilities and Exposures (CVE) stories
BackBox 8.0 automates hybrid network security & compliance
Last week
#
firewalls
#
network infrastructure
#
network security
BackBox 8.0 unifies and automates security and compliance across hybrid networks, helping firms manage on-premise and cloud assets with a single dashboard.
Multiple brother devices: Multiple vulnerabilities (FIXED)
Last week
#
firewalls
#
network security
#
breach prevention
Security researcher Rapid7 has uncovered 8 vulnerabilities in 742 printer models from Brother, FUJIFILM, Ricoh, and Toshiba, with fixes now available.
Azul enhances Java security detection, cutting false positives by 99%
This month
#
saas
#
devops
#
application security
Azul's new Java security tool cuts false positives by 99%, boosting detection accuracy and helping DevOps teams focus on real risks in production code.
Azul boosts Java security with improved runtime vulnerability detection
This month
#
devops
#
application security
#
apm
Azul’s Intelligence Cloud now cuts Java security false positives by up to 99%, using runtime data to boost vulnerability detection accuracy for DevOps teams.
Azul unveils Java tool to cut false positives by up to 99%
This month
#
devops
#
application security
#
apm
Azul has launched a Java vulnerability tool that cuts false positives by up to 99%, improving threat detection accuracy for production environments.
Picus launches tool for real-time validation of exploitable risks
Last month
#
devops
#
advanced persistent threat protection
#
soc
Picus Security launches Exposure Validation, a tool using real-time attack simulations to identify which vulnerabilities are truly exploitable in organisations.
IP Fabric unveils upgrade to boost firewall visibility & compliance
Last month
#
firewalls
#
network security
#
cloud security
IP Fabric launches version 7.2 to enhance firewall visibility and compliance, aiding enterprises in detecting misconfigurations and enforcing security policies.
Red Hat launches Advanced Developer Suite with focus on AI
Last month
#
hybrid cloud
#
application security
#
devsecops
Red Hat launches Advanced Developer Suite on OpenShift, enhancing developer productivity, AI integration, and application security with new tools and templates.
Red Hat Enterprise Linux 10 brings AI & post-quantum security
Last month
#
devops
#
hybrid cloud
#
hyperscale
Red Hat launches Enterprise Linux 10, featuring AI integration, enhanced security with post-quantum cryptography, and hybrid cloud support for enterprises.
Emojis used to hide attacks & bypass major AI guardrails
Last month
#
genai
#
llms
#
ai
Mindgard reveals emoji smuggling can bypass AI guardrails from Microsoft, Meta, Nvidia, and others with up to 100% attack success, raising serious security concerns.
Black Kite launches tool for third-party vulnerability insight
Last month
#
ransomware
#
supply chain
#
breach prevention
Black Kite launches Vulnerability Intelligence Briefs to help organisations identify and manage third-party cyber risks, enhancing supply chain security.
Minimus launches with USD $51 million to cut 95% of CVEs
Wed, 30th Apr 2025
#
cloud security
#
application security
#
supply chain
Minimus launches with USD $51 million to cut 95% of CVEs in software supply chains, offering secure components and faster vulnerability reduction.
Armis offers free access to real-time cyber threat database
Thu, 24th Apr 2025
#
firewalls
#
network security
#
advanced persistent threat protection
Armis launches free Vulnerability Intelligence Database to help security teams anticipate and tackle cyber threats with real-time, AI-driven insights.
Funding crisis sparks fears for future of global CVE system
Thu, 17th Apr 2025
#
supply chain
#
cybersecurity
#
software development
US government funding for the crucial CVE cybersecurity programme is set to lapse, raising fears over global vulnerability tracking and defence efforts.
CVE system secures 11-month extension worth USD $44 million
Thu, 17th Apr 2025
#
advanced persistent threat protection
#
cybersecurity
#
cyber threats
CISA extends its contract with MITRE for another 11 months at USD $44 million, securing the critical CVE vulnerability programme amid funding concerns.
Future of CVE repository in doubt as MITRE contract ends
Thu, 17th Apr 2025
#
advanced persistent threat protection
#
cybersecurity
#
cyber threats
Concerns rise as MITRE's contract to manage the CVE vulnerability database nears expiry, risking disruption to global cybersecurity infrastructure.
US funding lapse casts uncertainty over global CVE system
Thu, 17th Apr 2025
#
cybersecurity
#
incident response
#
infosecurity europe
US government funding for MITRE's CVE programme has expired, risking disruption to global cybersecurity efforts and vulnerability tracking systems.
How to protect legacy medical devices from modern cyber threats
Tue, 15th Apr 2025
#
ransomware
#
risk & compliance
#
cybersecurity
Healthcare providers in Australia and New Zealand face growing cyber threats, with legacy medical devices proving vulnerable due to outdated security measures.
Microsoft April Patch Tuesday highlights zero-day risks
Fri, 11th Apr 2025
#
ransomware
#
cybersecurity
#
microsoft
Microsoft's recent Patch Tuesday sparked scrutiny with a 40-minute delay in updates and notable vulnerabilities, including a critical zero-day in the CLFS Driver.
Zscaler report urges shift from VPNs to Zero Trust
Fri, 11th Apr 2025
#
vpns
#
ransomware
#
cloud security
Zscaler's 2025 ThreatLabz VPN Risk Report reveals soaring VPN usage in Australia but warns of heightened security risks, urging a shift to Zero Trust architectures.