SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Security vulnerabilities Stories - Page 7

American Stories

Security vulnerabilities stories

GitHub Action compromise affects over 23,000 repositories
Supply Chain

GitHub Action compromise affects over 23,000 repositories

A malicious commit in the tj-actions/changed-files GitHub Action, used in over 23,000 repositories, threatens software security across numerous CI pipelines.

By Kaleah Salmon • 3 min read • Thu, 20th Mar 2025

Global Stories

Security vulnerabilities stories

Cycode unveils AI Teammates & real-time runtime protection
Application Security

Cycode unveils AI Teammates & real-time runtime protection

Cycode launches AI Teammates and CI/MON runtime protection to enhance software supply chain security and threat detection in application security.

By Catherine Knowles • 3 min read • Thu, 24th Apr 2025
Tenable reveals privilege risk in Google Cloud Composer flaw
Storage

Tenable reveals privilege risk in Google Cloud Composer flaw

Tenable Research revealed a privilege escalation flaw in Google Cloud Composer, risking unauthorised access to key cloud resources before Google's fix.

By Catherine Knowles • 3 min read • Thu, 24th Apr 2025
Socket acquires Coana to cut false positive security alerts
Application Security

Socket acquires Coana to cut false positive security alerts

Socket has acquired cybersecurity startup Coana to enhance its supply chain security platform, cutting false positives by up to 80% for faster threat remediation.

By Jed Nykolle Harme • 3 min read • Thu, 24th Apr 2025
Lasso introduces first security gateway for MCP workflows
AI Security

Lasso introduces first security gateway for MCP workflows

Lasso has unveiled its MCP Gateway, the first security tool tailored for Model Context Protocol, aiming to bolster safety in generative AI workflows.

By Shannon Williams • 3 min read • Sat, 19th Apr 2025
Cobalt report reveals gaps in critical vulnerability fixes
DevOps

Cobalt report reveals gaps in critical vulnerability fixes

Cobalt's 2025 State of Pentesting Report reveals that 31% of serious security vulnerabilities remain unaddressed, despite 81% of leaders' confidence in their security.

By Shannon Williams • 3 min read • Fri, 18th Apr 2025
Microsoft April Patch Tuesday highlights zero-day risks
Ransomware

Microsoft April Patch Tuesday highlights zero-day risks

Microsoft's recent Patch Tuesday sparked scrutiny with a 40-minute delay in updates and notable vulnerabilities, including a critical zero-day in the CLFS Driver.

By Shannon Williams • 3 min read • Fri, 11th Apr 2025
Black Talon Security promotes Paul Murphy to growth role
Data Protection

Black Talon Security promotes Paul Murphy to growth role

Black Talon Security has elevated Paul Murphy to Chief Growth Officer, aiming to boost strategies and partnerships in the dental and healthcare sectors.

By Melvin Hipolito • 2 min read • Thu, 10th Apr 2025
Research reveals smart TV vulnerabilities threaten networks
Network Infrastructure

Research reveals smart TV vulnerabilities threaten networks

Research by CYFOX has uncovered critical vulnerabilities in smart TVs that threaten corporate networks, highlighting a broader industry security concern.

By Catherine Knowles • 2 min read • Fri, 28th Mar 2025
Massive attack on GitHub affects over 23,000 repositories
Supply Chain

Massive attack on GitHub affects over 23,000 repositories

A recent cyber attack has compromised over 23,000 GitHub repositories, raising alarms over software supply chain security and the exploitation of trusted components.

By Sean Mitchell • 3 min read • Thu, 20th Mar 2025
Tenable warns DeepSeek AI model can be breached for malware
Malware

Tenable warns DeepSeek AI model can be breached for malware

Tenable Research has raised alarms over security vulnerabilities in the generative AI model DeepSeek R1, warning it could simplify malware creation.

By Kaleah Salmon • 2 min read • Thu, 20th Mar 2025
Nozomi Networks honoured on Fast Company's 2025 list
IoT Security

Nozomi Networks honoured on Fast Company's 2025 list

Nozomi Networks has been ranked third in Fast Company's World's Most Innovative Companies 2025 for its pivotal work in securing critical infrastructure from cyber threats.

By Melania Watson • 2 min read • Wed, 19th Mar 2025
JFrog & NVIDIA team up to enhance secure AI deployments
Application Security

JFrog & NVIDIA team up to enhance secure AI deployments

JFrog has incorporated NVIDIA NIM microservices into its Software Supply Chain Platform, enhancing secure AI model deployment and streamlining enterprise solutions.

By Kaleah Salmon • 3 min read • Tue, 18th Mar 2025
Rising ICS/OT cyber threats due to budgetary imbalances
Cybersecurity

Rising ICS/OT cyber threats due to budgetary imbalances

A recent SANS Institute and OPSWAT report reveals serious shortcomings in ICS/OT cybersecurity budgets, with over half of organisations experiencing security incidents last year.

By Catherine Knowles • 2 min read • Fri, 7th Mar 2025
Opus Security unveils new AI-powered vulnerability platform
Cybersecurity

Opus Security unveils new AI-powered vulnerability platform

Opus Security has unveiled its Autonomous Vulnerability Management Platform, harnessing AI to streamline cybersecurity processes and reduce remediation delays by up to 90%.

By Catherine Knowles • 3 min read • Thu, 6th Mar 2025

Stories from Other Regions

Security vulnerabilities stories

Delving into windows CE, part 3: Introducing Team82's open-source debugger
DevOps

Delving into windows CE, part 3: Introducing Team82's open-source debugger

Team82 has unveiled an open-source debugger aimed at simplifying the analysis of Windows CE applications, crucial for security researchers in legacy environments.

By Tomer Goldschmidt • 3 min read • Thu, 10th Apr 2025
UK unveils Cyber Security & Resilience Bill advancements
EduTech

UK unveils Cyber Security & Resilience Bill advancements

The UK government has unveiled the Cyber Security and Resilience Bill, aiming to bolster protections for critical infrastructure against rising cyber threats.

By Catherine Knowles • 3 min read • Mon, 7th Apr 2025