The Cisco Hypershield is “probably the most consequential security innovation we have done in the 40 years that Cisco has been around,” EVP Jeetu Patel said.

Overview Lambda Layers in third party TensorFlow-based Keras models allow attackers to inject arbitrary code into versions built prior to Keras 2.13 that may then unsafely run with the

Protobom is an open source tool that simplifies creating, reading and translating software bill of materials data across various industry standard formats.

Cloudflare mitigated 4.5 million distributed denial of service attacks in the first three months of the year, equal to a third of all DDoS attacks in 2023.

Overview Various programming languages lack proper validation mechanisms for commands and in some cases also fail to escape arguments correctly when invoking commands within a Microsoft Windows environment. The

Overview A new cross-privilege Spectre v2 vulnerability that impacts modern CPU architectures supporting speculative execution has been discovered. CPU hardware utilizing speculative execution that are vulnerable to Spectre v2

The cloud provider integrates Gemini with its security operations, threat intelligence and Security Command Center services.

Overview HTTP allows messages to include named fields in both header and trailer sections. These header and trailer fields are serialised as field blocks in HTTP/2, so that they

Overview A novel traffic-loop vulnerability has been identified against certain implementations of UDP-based applications protocols. An unauthenticated attacker can use maliciously-crafted packets against a UDP-based vulnerable implementation of application

The Cybersecurity and Infrastructure Security Agency urges users and administrators to review Fortinet's advisories and apply necessary updates.

The deal, reportedly valued at $350 million, closed on March 13.

Overview A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution has been discovered. CPU hardware utilizing speculative execution that are vulnerable to Spectre v1

The Secure Flex Premium platform is a single-tenant architecture that can be deployed on top of an existing on-premises, hybrid or cloud environment.

Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways

Threat Actor Leverages Compromised Account of Former Employee to Access State Government Organization

The surge in activity can be attributed to the exploitation of high-profile vulnerabilities, Palo Alto Networks' threat intelligence team noted.

CISA Adds One Known Exploited Vulnerability to Catalog: Fortinet FortiOS

Cisco Releases Security Advisory for Vulnerabilities in Cisco Expressway Series

CISA Adds One Known Exploited Vulnerability to Catalog: Google Chromium V8

Moby and Open Container Initiative Release Critical Updates for Multiple Vulnerabilities Affecting Docker-related Components

CISA and FBI Release Secure by Design Alert Urging Manufacturers to Eliminate Defects in SOHO Routers

New Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways

Cisco Releases Security Advisory for Multiple Unified Communications and Contact Center Solutions Products

The Network Resilience Coalition published a white paper to offer recommendations to address the security risks of end-of-life products.