Vulnerability Management

Teams need to build resilience into response efforts, improve detection and response, and update threat awareness.

CISA ends busy week where it also worked with NSA to release best practices guidance on Microsoft Exchange Server.

CyberScoop reports that OpenAI has unveiled in beta its new Aardvark security-focused artificial intelligence model that seeks to advance vulnerability discovery, patching, and remediation efforts.

Over 3 billion users of Chromium-based browsers, including Google Chrome, Microsoft Edge, Opera, and ChatGPT Atlas, could have their browsers crash within seconds in attacks exploiting the critical Blink rendering engine flaw dubbed "Brash", reports Security Affairs.

More than 10,000 WordPress sites could be subjected to total site takeovers due to a pair of critical vulnerabilities in the widely used King Addons for Elementor plugin, Infosecurity Magazine reports.

The document provides best practices for securing on-premises Exchange servers from attack.

SecurityWeek reports that threat actors have exploited a critical arbitrary code execution flaw in the widely used open source enterprise wiki software platform XWiki, tracked as CVE-2025-24893, to facilitate a cryptomining operation.