Ivanti has misjudged a bug in the VPN software Connect Secure. This is a security vulnerability that is under attack.

On March 28, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) released a Malware Analysis Report (MAR) on RESURGE malware, which ...

The new critical bug, CVE-2025-22457, is a stack-based buffer overflow flaw that can lead to unauthenticated remote code ...

Ivanti misdiagnoses a remote code execution vulnerability and Mandiant reports that Chinese hackers are launching in-the-wild ...

Explore the risks of shadow IT for government employees and key attack vectors. Learn mitigation strategies to balance security, governance & shadow IT usage.

The reports may seem fragmentary and anecdotal but they add up to a devastating pattern. Chinese state-affiliated hackers ...

Application security (AppSec) would not have existed for the past 25 years without the Common Vulnerabilities and Exposures ...

Keeper Security, the leading provider of zero-trust and zero-knowledge Privileged Access Management (PAM) software protecting passwords, passkeys, privileged accounts, secrets and remote connections, ...

CISA is warning of new malware targeting vulnerable Ivanti products Multiple products, vulnerable to a 2024 flaw, are being ...

March 2025 was a high-alert month for cybersecurity teams. Critical CVEs surfaced across widely used technologies, some quiet, others loud, but all carrying real risk. These weren’t just routine ...

Uncle Sam dubbed the latest software nasty Resurge, and warned it infects devices by exploiting CVE-2025-0282 - a critical ...

T-Mobile will begin distributing settlement payments in April 2025 to customers affected by a major 2021 data breach that exposed the personal information of 76 million U.S. customers. The ...