Application securityWhatsApp zero-day chained with Apple OS flaw to target Apple users Steve ZurierSeptember 2, 2025Two zero-day bugs were chained in suspected spyware attacks, according to Amnesty International.
Vulnerability ManagementState-sponsored attacks now make up 53% of vulnerability exploitsLaura FrenchAugust 29, 2025Edge devices and Microsoft products were the most common targets for exploitation.
Critical Infrastructure Security13 countries warn against China’s Salt Typhoon group in joint advisoryLaura FrenchAugust 28, 2025The Chinese-backed group heavily targets vulnerable Cisco devices and other public CVEs.
Vulnerability ManagementCitrix patches critical zero-day, two other flawsLaura FrenchAugust 27, 2025CVE-2025-7775 is the third Citrix flaw added to the KEV catalog in two days.
Exposure managementVulnerability management is dead. Long live exposure managementPaul WagenseilAugust 27, 2025Exposure management might seem new, but it's the logical extension of vulnerability management to cover today's wider, more complex attack surface.
Vulnerability ManagementTwo Citrix bugs, Git repo flaw added to exploited vulnerabilities listSteve ZurierAugust 26, 2025While not critical, CISA added the Citrix and Git bugs to its list based on evidence of active exploitation.
IdentityScreenConnect super admins targeted in spearphishing campaignLaura FrenchAugust 26, 2025Attackers use the EvilGinx framework to harvest credentials and MFA tokens.
Cloud SecurityFive ways teams can respond to the recent SharePoint attacksJulien ChampseixAugust 26, 2025Attackers will continue to infiltrate on-prem servers – here’s how to prepare for the next major breach.
