News

CrushFTP vulnerability exploited in the wild, added to CISA KEV database
CISA has also picked up on the news, adding the bug to its Known Exploited Vulnerabilities Catalog (KEV). This means that Federal Civilian Executive Branch (FCEB) agencies have a three-week deadline ...
The Hacker News18h
CISA Adds CrushFTP Vulnerability to KEV Catalog Following Confirmed Active Exploitation
A recently disclosed critical security flaw impacting CrushFTP has been added by the U.S. Cybersecurity and Infrastructure ...
CISA spots spawn of Spawn malware targeting Ivanti flaw
Uncle Sam dubbed the latest software nasty Resurge, and warned it infects devices by exploiting CVE-2025-0282 - a critical ...
CISA adds Ivanti Connect Secure vulnerability to KEV catalog
CVE-2025-22457 is a critical stack buffer-overflow vulnerability. Ivanti had initially assessed as a low-level product bug ...
Infosecurity-magazine.com29d
CISA Urges All Organizations to Patch Exploited Critical Ivanti Vulnerabilities
Three critical vulnerabilities in Ivanti software have recently been added to the US Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) catalog. In a new ...
CSOonline19d
CISA marks NAKIVO’s critical backup vulnerability as actively exploited
The Cybersecurity and Infrastructure Security Agency (CISA) has added a patched, high-severity vulnerability affecting NAKIVO’s backup and replication software to its known exploited ...
Do you use Gmail or Outlook? FBI, CISA issue warning about Medusa ransomware
Federal authorities have issued an advisory warning people of Medusa ransomware that has breached the data of more than 300 people since February.
Security Boulevard6d
CVEs lose relevance: Get proactive — and think beyond vulnerabilities
Application security (AppSec) would not have existed for the past 25 years without the Common Vulnerabilities and Exposures ...
Bleeping Computer19d
CISA tags NAKIVO backup flaw as actively exploited in attacks
CISA has warned U.S. federal agencies to secure their networks against attacks exploiting a high-severity vulnerability in NAKIVO's Backup & Replication software. Tracked as CVE-2024-48248 ...