A subgroup of Seashell Blizzard exploited public vulnerabilities in internet-facing systems, Microsoft researchers said.

The Common Vulnerability Scoring System has a lot of critics, but experts say it’s still the best unified way to share the severity of cybersecurity flaws.

The bulletin identifies five critical remote code execution (RCE) vulnerabilities affecting the core components of Android’s system.

Moxa says the flaws can be used to bypass user authentication, escalate privileges and gain root access to devices. 

The National Vulnerability Database has ceased some of its work, but some experts fear the formation of a consortium to address its problems lacks sufficient urgency.

Twitter's source code apparently revealed how it's possible to game the company's software to reduce access to specific accounts.

While CISA says the catalog is catching on, some think it needs improvement.

The industry-wide program for naming and documenting vulnerabilities suffers from fluctuating funding and insufficient oversight, according to a House panel.

China’s National Vulnerability Database works more than twice as fast on average as its U.S. counterpart, according to new research.

There is a median lag time of approximately seven days between when someone discovers an exploitable software vulnerability and its eventual release on NIST's National Vulnerability Database,…