Exploited vulnerabilities have turned up in Ivanti products 16 times since 2024. That’s more than any other vendor in the network edge device space.

The 21 signatories support a number of steps, such as banning vendors who behave illegally, in a document agreed to last week in Paris.

The software defect in the widely used open-source JavaScript framework allows attackers to bypass middleware-based authorization.

The legislation to make contractors implement VDPs aligned with NIST guidelines is aimed at protecting Americans’ data, co-sponsor Rep. Nancy Mace says.

Reps. Nancy Mace and Shontel Brown reintroduced VDP legislation after the 2024 bipartisan, bicameral bill didn’t get a full Senate vote.

The Homeland Security and Governmental Affairs Committee on Wednesday also advanced legislation to strengthen the federal IT supply chain.

The November security bulletin includes two CVE's reportedly exploited in the wild.

The vulns would allow attackers to run any commands on targeted computers without user knowledge. But it would take a lot of work to get to that…

If exploited, the vulnerabilities could give hackers full administrative access to critical networks found in the management systems for large fuel storage.

The tech giant's regular vulnerability list includes new vulnerabilities for Windows Updater and Installer.