UNC5221 has a knack for exploiting defects in Ivanti products. The group has exploited at least four vulnerabilities in the vendor’s products since 2023, according to Mandiant.

The software defect in the widely used open-source JavaScript framework allows attackers to bypass middleware-based authorization.

Trend Micro researchers discovered and reported the eight-year-old defect to Microsoft six months ago. The company hasn’t made any commitments to patch or remediate the issue.

The most consequential cyberattacks observed by Darktrace last year were linked to software defects in firewalls and perimeter network technologies.

The November security bulletin includes two CVE's reportedly exploited in the wild.

The “severe” flaw could allow attackers full access to instances.

The open-source ecosystem is being overrun by malicious packages, a new report from Sonatype finds.

The vulns would allow attackers to run any commands on targeted computers without user knowledge. But it would take a lot of work to get to that…

Ivanti's Cloud Service Appliance has a "high severity vulnerability" being exploited in the wild.

The company issued a patch for the high-severity bug that allows arbitrary code execution.