SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Common Vulnerabilities and Exposures (CVE) Stories - Page 7

American Stories

Common Vulnerabilities and Exposures (CVE) stories

CVE system secures 11-month extension worth USD $44 million
Advanced Persistent Threat Protection

CVE system secures 11-month extension worth USD $44 million

CISA extends its contract with MITRE for another 11 months at USD $44 million, securing the critical CVE vulnerability programme amid funding concerns.

By Shannon Williams • 3 min read • Thu, 17th Apr 2025
GitHub Action compromise affects over 23,000 repositories
Supply Chain

GitHub Action compromise affects over 23,000 repositories

A malicious commit in the tj-actions/changed-files GitHub Action, used in over 23,000 repositories, threatens software security across numerous CI pipelines.

By Kaleah Salmon • 3 min read • Thu, 20th Mar 2025

Global Stories

Common Vulnerabilities and Exposures (CVE) stories

IP Fabric unveils upgrade to boost firewall visibility & compliance
Firewalls

IP Fabric unveils upgrade to boost firewall visibility & compliance

IP Fabric launches version 7.2 to enhance firewall visibility and compliance, aiding enterprises in detecting misconfigurations and enforcing security policies.

By Catherine Knowles • 3 min read • Thu, 22nd May 2025
Red Hat launches Advanced Developer Suite with focus on AI
Hybrid Cloud

Red Hat launches Advanced Developer Suite with focus on AI

Red Hat launches Advanced Developer Suite on OpenShift, enhancing developer productivity, AI integration, and application security with new tools and templates.

By Melvin Hipolito • 4 min read • Wed, 21st May 2025
Red Hat Enterprise Linux 10 brings AI & post-quantum security
DevOps

Red Hat Enterprise Linux 10 brings AI & post-quantum security

Red Hat launches Enterprise Linux 10, featuring AI integration, enhanced security with post-quantum cryptography, and hybrid cloud support for enterprises.

By Sean Mitchell • 4 min read • Wed, 21st May 2025
Emojis used to hide attacks & bypass major AI guardrails
Generative AI

Emojis used to hide attacks & bypass major AI guardrails

Mindgard reveals emoji smuggling can bypass AI guardrails from Microsoft, Meta, Nvidia, and others with up to 100% attack success, raising serious security concerns.

By Catherine Knowles • 3 min read • Wed, 7th May 2025
Black Kite launches tool for third-party vulnerability insight
Ransomware

Black Kite launches tool for third-party vulnerability insight

Black Kite launches Vulnerability Intelligence Briefs to help organisations identify and manage third-party cyber risks, enhancing supply chain security.

By Shannon Williams • 3 min read • Fri, 2nd May 2025
Minimus launches with USD $51 million to cut 95% of CVEs
Cloud Security

Minimus launches with USD $51 million to cut 95% of CVEs

Minimus launches with USD $51 million to cut 95% of CVEs in software supply chains, offering secure components and faster vulnerability reduction.

By Shannon Williams • 3 min read • Wed, 30th Apr 2025
Armis offers free access to real-time cyber threat database
Firewalls

Armis offers free access to real-time cyber threat database

Armis launches free Vulnerability Intelligence Database to help security teams anticipate and tackle cyber threats with real-time, AI-driven insights.

By Catherine Knowles • 3 min read • Thu, 24th Apr 2025
Future of CVE repository in doubt as MITRE contract ends
Advanced Persistent Threat Protection

Future of CVE repository in doubt as MITRE contract ends

Concerns rise as MITRE's contract to manage the CVE vulnerability database nears expiry, risking disruption to global cybersecurity infrastructure.

By Shannon Williams • 3 min read • Thu, 17th Apr 2025
US funding lapse casts uncertainty over global CVE system
Cybersecurity

US funding lapse casts uncertainty over global CVE system

US government funding for MITRE's CVE programme has expired, risking disruption to global cybersecurity efforts and vulnerability tracking systems.

By Sean Mitchell • 3 min read • Thu, 17th Apr 2025
How to protect legacy medical devices from modern cyber threats
Ransomware

How to protect legacy medical devices from modern cyber threats

Healthcare providers in Australia and New Zealand face growing cyber threats, with legacy medical devices proving vulnerable due to outdated security measures.

By Rashid Mohiuddin • 5 min read • Tue, 15th Apr 2025
Microsoft April Patch Tuesday highlights zero-day risks
Ransomware

Microsoft April Patch Tuesday highlights zero-day risks

Microsoft's recent Patch Tuesday sparked scrutiny with a 40-minute delay in updates and notable vulnerabilities, including a critical zero-day in the CLFS Driver.

By Shannon Williams • 3 min read • Fri, 11th Apr 2025
Zscaler report urges shift from VPNs to Zero Trust
Virtual Private Networks

Zscaler report urges shift from VPNs to Zero Trust

Zscaler's 2025 ThreatLabz VPN Risk Report reveals soaring VPN usage in Australia but warns of heightened security risks, urging a shift to Zero Trust architectures.

By Catherine Knowles • 3 min read • Fri, 11th Apr 2025
N-able launches new feature to boost vulnerability management
Advanced Persistent Threat Protection

N-able launches new feature to boost vulnerability management

N-able has launched a new Vulnerability Management feature for its UEM products, enhancing risk mitigation for organisations amid rising cyber threats.

By Kaleah Salmon • 2 min read • Fri, 11th Apr 2025
April Patch Tuesday: Microsoft announces 121 vulnerabilities
Cybersecurity

April Patch Tuesday: Microsoft announces 121 vulnerabilities

Microsoft has unveiled 121 vulnerabilities in its April 2025 Patch Tuesday update, marking a significant increase from last month's total.

By Adam Barnett • 5 min read • Wed, 9th Apr 2025
RunZero expands platform for enhanced exposure management
Risk & Compliance

RunZero expands platform for enhanced exposure management

runZero has unveiled an expanded platform to enhance exposure management, promising to aid organisations in effectively managing risk across their attack surfaces.

By Kaleah Salmon • 4 min read • Tue, 8th Apr 2025
Kaspersky discovers & patches zero-day Chrome flaw
Malware

Kaspersky discovers & patches zero-day Chrome flaw

Kaspersky has uncovered and patched a critical zero-day vulnerability in Google Chrome, enabling attackers to bypass sandbox protections via malicious links.

By Catherine Knowles • 3 min read • Thu, 3rd Apr 2025