Technology ❯ Cybersecurity

Vulnerability Management

Patch Management Bug Bounty Programs Security Updates CVE Security Patches Threat Detection Common Vulnerabilities and Exposures (CVE) Bounty Programs CVE Tracking Automated Testing Critical Vulnerabilities Risk Assessment Threat Intelligence Patching Patching Strategies Configuration Changes Automated Fixing Bug Hunting Secure Coding CVE Reports Security Bounty Programs Automated Tools AI in Cybersecurity Ethical Hacking Auditing Code Security Fixes WhatsApp Container Security Browser Security CVE Contributors Common Vulnerabilities and Exposures Vulnerability Disclosure CVSS Scores Disclosure Policies Open Source Software Software Supply Chain Security Software Vulnerabilities Cloud Security Response Policies Access Control

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

Leaking server memory before login, the flaw heightens credential exposure risk, complicating investigations.

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out

HPE Urges Immediate Patching for OneView CVE-2025-37164, a CVSS 10 Unauthenticated RCE

OpenAI Flags Rising Cyber Risk in Next Models, Unveils Guardrails and Aardvark Tool

Microsoft Puts All Online Services 'In Scope by Default' for Bug Bounties

Portugal Enacts Narrow Safe Harbor for Good-Faith Security Research

Microsoft’s November Patch Tuesday Fixes 63 Flaws, Including Actively Exploited Windows Kernel Zero-Day

Cisco Patches Critical UCCX Flaws as New Firewall Attack Variant Emerges

OpenAI Launches Aardvark, a GPT-5 Security Agent in Private Beta

Qualys Turns TruRisk Into AI-Powered Risk Operations Center, Adding TruConfirm, TruLens and ETM Identity

Apple Doubles Top Security Bounty to $2 Million and Unveils Verifiable Target Flags

RondoDox Botnet Blasts 56 N-Day Flaws Across 30+ Vendors After Late-September Exploit Surge

Broadcom Patches VMware Privilege-Escalation Zero-Day Linked to China, Faces Disclosure Scrutiny

Agentic AI Recasts Cyber and AppSec With Autonomous Action, Elevating Data Protection Risks

Apple Plans Silent ‘Background Security Improvements’ in iOS 26.1 to Replace Rapid Security Responses

Fortra Patches CVSS 10 Flaw in GoAnywhere MFT, Urges Lockdown of Admin Consoles

SonicWall Halts Cloud Backups After Breach Exposes Firewall Configurations

CISA Claims Stewardship of CVE, Unveils 'Quality Era' Roadmap

Akira Ransomware Renews Attacks Through Year-Old SonicWall Flaw and SSLVPN Gaps

Microsoft’s September Patch Tuesday Fixes 80–86 Flaws, Two Disclosed Zero-Days, No Active Exploits