Many open-source software developers need to improve the way in which they handle vulnerability reports, according to researchers from security firm Rapid7, who recently found and reported ...

The EU Cyber Resilience Act (CRA) reporting requirements take effect on September 11, 2026, and connected-device manufacturers need more than a vulnerability scan to be ready. CRA requires a ...

The European Union Agency for Cybersecurity (ENISA) has recently launched the beta of the European Vulnerability Database (EUVD), a new public platform operating alongside, but independently from, the ...

Security platform Illumio and cloud security and compliance platform Qualys are announcing a new integration that will enable organizations to visualize vulnerabilities across data centers and clouds.

On March 12th, Mitsumasa Kondo and Kyotaro Horiguchi of NTT Open Source Software Center (of Japan) reported an issue to the PostgreSQL security mailing list. They had uncovered the issue while doing ...

According to new research 82 percent of companies report an increase in the gap between the number of vulnerabilities/exposures in their environment and their ability to remediate them. The 2024 State ...

This is not about "misuse" of anything, the underlying problem is called "a TOCTOU race", the pattern of that being application A verifies that condition X holds application B changes the state of the ...

Collaboration and coordination of Cisco security teams which manage vulnerability detection, mitigation and disclosure PSIRT: Mission, Process, Engagement Model Customer Expectations Top of our mind ...

Many organizations struggle with collaboration, tools integration, keeping up with vulnerability volume and prioritizing remediation actions. Time is not on their side. NIST defines a vulnerability as ...