Vulnerability

  • a microsoft storefront in a city nightscape
    Image attribution tooltip
    Jeenah Moon via Getty Images
    Image attribution tooltip

    CISA, Microsoft warn about new Microsoft Exchange server vulnerability

    The flaw could enable a hacker to perform a “total domain compromise” on affected systems, CISA said.

    By • Aug. 6, 2025
  • Multiple cooling towers illuminated with red lights emit large plumes of steam into the night sky. The towers are reflected in a still body of water in the foreground, with a silhouetted tree and landscape between the towers and the water.
    Image attribution tooltip
    Alamy
    Image attribution tooltip

    Top US energy companies frequently exposed to critical security flaws

    A report from security firm SixMap shows that a large number of energy companies use equipment with vulnerabilities that are located on potentially exposed ports.

    By • Aug. 6, 2025
  • Illustration of locks layered above circuity.
    Image attribution tooltip
    Traitov/iStock/Getty via Getty Images
    Image attribution tooltip

    SonicWall investigating possible zero-day related to firewall attacks

    Researchers recently warned about a surge in Akira ransomware attacks linked to a potential SonicWall vulnerability.

    By • Aug. 5, 2025
  • AI Artificial Intelligence Security, Digital Information Protected Secured Lock
    Image attribution tooltip
    Just_Super via Getty Images
    Image attribution tooltip

    AI is helping hackers automate and customize cyberattacks

    CrowdStrike’s annual cyber-threat-hunting report reveals the double threat that AI poses to many businesses.

    By • Aug. 4, 2025
  • Team of hackers dressed in black work on computers in dark room.
    Image attribution tooltip
    gorodenkoff via Getty Images
    Image attribution tooltip

    Ransomware spike linked to potential zero-day flaw in SonicWall devices

    Researchers say hackers using the Akira ransomware strain may be exploiting the vulnerability en masse.

    By • Updated Aug. 4, 2025
  • Exterior view of Microsoft's Vancouver office in Canada on December 22, 2023.
    Image attribution tooltip
    hapabapa via Getty Images
    Image attribution tooltip

    Palo Alto Networks investigating ransomware threat related to SharePoint exploitation

    Researchers said an unidentified hacker demanded a ransom after an intrusion linked to the SharePoint flaw.  

    By • Aug. 1, 2025
  • A sign that says Illumina is on a curb in front of red brick buildings.
    Image attribution tooltip
    Courtesy of Illumina
    Image attribution tooltip

    DOJ reaches $9.8 million settlement with Illumina over cyber whistleblower claims

    The U.S. alleged the company knowingly sold genetic-sequencing systems with software vulnerabilities to federal agencies.

    By • Updated Aug. 1, 2025
  • An artist's rendering of 3D shapes with AI, signifying a creative display of technology.
    Image attribution tooltip
    BlackJack3D via Getty Images
    Image attribution tooltip

    ‘Shadow AI’ increases cost of data breaches, report finds

    Companies are failing to protect their AI tools from compromise, often leading to more extensive data breaches, according to new data from IBM.

    By • July 30, 2025
  • Cyber Security Ransomware
    Image attribution tooltip
    Just_Super via Getty Images
    Image attribution tooltip

    Ransomware attacks against oil and gas firms surge

    Manufacturing remains the No. 1 ransomware target, new data from Zscaler shows.

    By • July 29, 2025
  • A businessperson with a generative AI brain concept above his hand
    Image attribution tooltip
    chombosan via Getty Images
    Image attribution tooltip

    Research shows LLMs can conduct sophisticated attacks without humans

    The project, launched by Carnegie Mellon in collaboration with Anthropic, simulated the 2017 Equifax data breach.

    By • July 28, 2025
  • The flag of North Korea flies from a propaganda tower near the Demilitarized Zone with South Korea
    Image attribution tooltip
    Carl Court via Getty Images
    Image attribution tooltip

    Treasury sanctions North Koreans involved in IT-worker schemes

    Authorities also charged several of the indicted people with attempting to evade U.S. sanctions on North Korea.

    By • July 25, 2025
  • The Department of Energy (DOE) sign is seen at its headquarters, the James Forrestal Building, nicknamed the Little Pentagon, in Washington, DC.
    Image attribution tooltip
    hapabapa via Getty Images
    Image attribution tooltip

    What we know about the Microsoft SharePoint attacks

    State-linked hackers and ransomware groups are targeting SharePoint customers across the globe.

    By • July 24, 2025
  • The White House in Washington, D.C.
    Image attribution tooltip
    Alex Wong via Getty Images
    Image attribution tooltip

    Trump AI plan calls for cybersecurity assessments, threat info-sharing

    It remains unclear how federal agencies depleted by layoffs will be able to implement the strategy’s ambitious vision, which includes an ISAC dedicated to AI.

    By • July 23, 2025
  • CISA, cybersecurity, agency
    Image attribution tooltip
    Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
    Image attribution tooltip

    SharePoint hacking campaign affects hundreds of systems worldwide

    CISA is responding to potential compromises at federal agencies and various state and local entities.

    By • Updated July 23, 2025
  • The Microsoft logo is seen at an Experience Center on Fifth Avenue on April 03, 2024 in New York City.
    Image attribution tooltip
    Michael M. Santiago via Getty Images
    Image attribution tooltip

    Microsoft sees China-backed nation-state hackers among adversaries targeting SharePoint

    The company urged customers to apply security updates as security researchers warn of escalating attacks.

    By • July 22, 2025
  • a microsoft storefront in a city nightscape
    Image attribution tooltip
    Jeenah Moon via Getty Images
    Image attribution tooltip

    Microsoft, CISA warn of cyberattacks targeting on-premises SharePoint servers

    The flaw has already led to widespread compromises prior to Microsoft’s release of an emergency patch.

    By • Updated July 21, 2025
  • Microsoft, antitrust, Alaily, FTC. Google
    Image attribution tooltip
    David Ramos via Getty Images
    Image attribution tooltip

    Top US senator calls out supply-chain risk with DoD contractors

    The Senate Intelligence Committee chairman questioned the security of Microsoft’s “digital escort” arrangement with its Chinese employees.

    By • Updated July 18, 2025
  • Ransomware Data Breach Protection Cyber Security Email Phishing Encrypted Technology, Digital Information Protected Secured
    Image attribution tooltip
    Just_Super via Getty Images
    Image attribution tooltip

    Researchers warn of cyberattacks targeting key Fortinet software

    Experts urged Fortinet customers to immediately apply patches or disable the affected administrative interface.

    By • Updated July 18, 2025
  • Cyber Security Data Breach Protection Ransomware Email Phishing Encrypted Technology, Digital Information Protected Secured
    Image attribution tooltip
    Just_Super via Getty Images
    Image attribution tooltip

    Threat actor targets end-of-life SonicWall SMA 100 appliances in ongoing campaign

    The hacker has deployed a backdoor to modify the boot process and has exploited several different vulnerabilities during the attack spree.

    By • July 16, 2025
  • A medical team takes a patient into the isolation ward in the emergency department of a full-service acute hospital facility.
    Image attribution tooltip
    Lisa Maree Williams via Getty Images
    Image attribution tooltip

    Risk management, legacy tech pose major threats to healthcare firms, report finds

    Companies have improved their recovery processes and user controls but still lag in risk preparedness, according to the report.

    By • July 15, 2025
  • A series of yellow folders that depict lines of binary code running between them.
    Image attribution tooltip
    D3Damon via Getty Images
    Image attribution tooltip

    Hackers exploiting flaw in widely used Wing FTP Server

    Researchers warn that a vulnerability in the file-transfer service could enable remote code execution.

    By • Updated July 14, 2025
  • Norfolk Southern train Bellevue Yard Ohio
    Image attribution tooltip

    Retrieved from Norfolk Southern 

    Image attribution tooltip

    Major railroad-signaling vulnerability could lead to train disruptions

    The high-severity flaw could let a hacker abruptly halt — and potentially derail — a train.

    By • Updated July 14, 2025
  • A hand with a phone in it and laptop in frame.
    Image attribution tooltip

     

    Shutterstock / TippaPatt

    Image attribution tooltip

    Businesses are overconfident as mobile phishing scams surge

    Nearly six in 10 companies experienced incidents because of voice or text phishing attacks that led to executive impersonation, according to a new report from Lookout.

    By • July 11, 2025
  • A towering Citrix-branded expo sign; the tagline: "Better experience"
    Image attribution tooltip

    Citrix via Flickr

    Image attribution tooltip

    Researchers, CISA confirm active exploitation of critical Citrix Netscaler flaw

    Critics have faulted Citrix for not updating its guidance in recent days, even as concerns grow about a resumption of the 2023 CitrixBleed crisis.

    By • Updated July 11, 2025
  • Laptop, code hologram and woman thinking of data analytics, information technology or software overlay at night
    Image attribution tooltip

    stock.adobe.com/Malambo C/peopleimages.com

    Image attribution tooltip
    Sponsored by Imprivata

    Why IT teams under pressure are looking to access logs for answers

    Under pressure, IT teams are tapping access logs for real-time insight—not just compliance.

    By Joel Burleson-Davis, Chief Technology Officer, Imprivata • June 30, 2025