What EU's Bug Database Means for Vulnerability Tracking | Hacktivists Make Little Impact During India-Pakistan Conflict

Klicken Sie hier, um Informationweek.com zu abonnieren

Kategorien: Dienstleistungen | Professionals Geschäftswaren Finanziell Kantoor Marketing Einzelhandel Einzelhandel Industrie Machines Alter: 14 - 18 Jahr 19 - 30 Jahr 31 - 64 Jahre

Laden...

1 Monat vor

Html
Text

The EU cyber agency ENISA has launched its vulnerability database, the EUVD; security experts shared their thoughts regarding what this means for CVEs, as well as the larger conversation around how bugs are tracked.

May 15, 2025

Signup

Weekly Edition

The latest news and insights for cybersecurity professionals

- The Latest News and Features -

What Does EU's Bug Database Mean for Vulnerability Tracking?‎‎ The EU cyber agency ENISA has launched its vulnerability database, the EUVD; security experts shared their thoughts regarding what this means for CVEs, as well as the larger conversation around how bugs are tracked.‎‎ Keep Reading →

DR GLOBAL

Hacktivists Make Little Impact During India-Pakistan Conflict‎‎ While hacktivists claimed more than 100 successful attacks against Indian government, education, and military targets, the attacks were overblown in most cases and often did not even happen.‎‎

Ivanti EPMM Zero-Day Flaws Exploited in Chained Attack‎‎ The security software maker said the vulnerabilities in Endpoint Manager Mobile have been exploited in the wild against "a very limited number of customers" — for now — and stem from open source libraries.‎‎

Windows Zero-Day Bug Exploited for Browser-Led RCE‎‎ Microsoft's May 2025 Patch Tuesday update also contains four other actively exploited zero-day security vulnerabilities, two publicly known bugs, and 12 critical patches.‎‎

Attackers Lace Fake Generative AI Tools With 'Noodlophile' Malware‎‎ Threat actors are scamming users by advertising legitimate-looking generative AI websites that, when visited, install credential-stealing malware onto the victim's computer.‎‎

Commvault: Vulnerability Patch Works as Intended‎‎ The security researcher who questioned the effectiveness of a patch for recently disclosed bug in Commvault Command Center did not test patched version, the company says.‎‎

SonicWall Issues Patch for Exploit Chain in SMA Devices‎‎ Three vulnerabilities in SMA 100 gateways could facilitate root RCE attacks, and one of the vulnerabilities has already been exploited in the wild.‎‎

Infosec Layoffs Aren't the Bargain That Boards May Think‎‎ Salary savings come with hidden costs, including insider threats and depleted cybersecurity defenses, conveying advantages to skilled adversaries, experts argue.‎‎

Cyber Then & Now: Inside a 2-Decade Industry Evolution‎‎ On Dark Reading's 19-year anniversary, Editor-in-Chief Kelly Jackson Higgins stops by Informa TechTarget's RSAC 2025 Broadcast Alley studio to discuss how things have changed since the early days of breaking Windows and browsers, lingering challenges, and what's next beyond AI.‎‎

THE EDGE

Building Effective Security Programs Requires Strategy, Patience, and Clear Vision‎ Capital One executives share insights on how organizations should design their security programs, implement passwordless technologies, and reduce their attack surface.‎

DR TECHNOLOGY

Orca Security Gets AI-Powered Remediation From Opus Deal‎ The acquisition will enhance Orca's CNAPP offering with autonomous vulnerability remediation and prevention technologies from Opus.‎

- Commentary -

Opinions from thought leaders around the cybersecurity industry

DeepSeek, Deep Research Mean Deep Changes for AI Security‎‎ Why securing the inference chain is now the top priority for AI applications and infrastructure.‎‎

Vulnerability Detection Tops Agentic AI at RSAC's Startup Competition‎‎ Agentic-native startups threaten to reduce the zero-day problem to just a zero-hour issue. Of course, AI agents will accelerate offensive attacks as well.‎‎

More Commentary →

- Upcoming Events -

May 15, 2025

Cybersecurity Strategies for Small and Medium-Sized Businesses

May 20, 2025

Browse Bravely With Prisma Access Browser

Jun 26, 2025

Strategic Security for the Modern Enterprise

More Events →

- More Resources -

WHITE PAPER

A Guide to Azure Virtual Desktop Cost Management