SecurityBrief UK - Technology news for CISOs & cybersecurity decision-makers
United Kingdom

Common Vulnerabilities and Exposures (CVE) Stories - Page 4

Global Stories

Common Vulnerabilities and Exposures (CVE) stories

US funding lapse casts uncertainty over global CVE system
Cybersecurity

US funding lapse casts uncertainty over global CVE system

US government funding for MITRE's CVE programme has expired, risking disruption to global cybersecurity efforts and vulnerability tracking systems.

By Sean Mitchell • 3 min read • Thu, 17th Apr 2025
How to protect legacy medical devices from modern cyber threats
Ransomware

How to protect legacy medical devices from modern cyber threats

Healthcare providers in Australia and New Zealand face growing cyber threats, with legacy medical devices proving vulnerable due to outdated security measures.

By Rashid Mohiuddin • 5 min read • Tue, 15th Apr 2025
Microsoft April Patch Tuesday highlights zero-day risks
Ransomware

Microsoft April Patch Tuesday highlights zero-day risks

Microsoft's recent Patch Tuesday sparked scrutiny with a 40-minute delay in updates and notable vulnerabilities, including a critical zero-day in the CLFS Driver.

By Shannon Williams • 3 min read • Fri, 11th Apr 2025
Zscaler report urges shift from VPNs to Zero Trust
Virtual Private Networks

Zscaler report urges shift from VPNs to Zero Trust

Zscaler's 2025 ThreatLabz VPN Risk Report reveals soaring VPN usage in Australia but warns of heightened security risks, urging a shift to Zero Trust architectures.

By Catherine Knowles • 3 min read • Fri, 11th Apr 2025
N-able launches new feature to boost vulnerability management
Advanced Persistent Threat Protection

N-able launches new feature to boost vulnerability management

N-able has launched a new Vulnerability Management feature for its UEM products, enhancing risk mitigation for organisations amid rising cyber threats.

By Kaleah Salmon • 2 min read • Fri, 11th Apr 2025
April Patch Tuesday: Microsoft announces 121 vulnerabilities
Cybersecurity

April Patch Tuesday: Microsoft announces 121 vulnerabilities

Microsoft has unveiled 121 vulnerabilities in its April 2025 Patch Tuesday update, marking a significant increase from last month's total.

By Adam Barnett • 5 min read • Wed, 9th Apr 2025
RunZero expands platform for enhanced exposure management
Risk & Compliance

RunZero expands platform for enhanced exposure management

runZero has unveiled an expanded platform to enhance exposure management, promising to aid organisations in effectively managing risk across their attack surfaces.

By Kaleah Salmon • 4 min read • Tue, 8th Apr 2025
Kaspersky discovers & patches zero-day Chrome flaw
Malware

Kaspersky discovers & patches zero-day Chrome flaw

Kaspersky has uncovered and patched a critical zero-day vulnerability in Google Chrome, enabling attackers to bypass sandbox protections via malicious links.

By Catherine Knowles • 3 min read • Thu, 3rd Apr 2025
Building a culture of cyber hygiene
Data Protection

Building a culture of cyber hygiene

As cyber attacks surge, the World Economic Forum warns of a widening skills gap, urging organisations to foster a culture of cyber hygiene for better security.

By Jack Meltzer • 4 min read • Tue, 18th Mar 2025
JFrog & Hugging Face join forces to secure AI models
Advanced Persistent Threat Protection

JFrog & Hugging Face join forces to secure AI models

JFrog has partnered with Hugging Face to enhance security for machine learning models, boosting safety measures on the Hugging Face Hub against potential threats.

By Kaleah Salmon • 2 min read • Tue, 18th Mar 2025
Microsoft patches 56 vulnerabilities, 7 zero days fixed
Phishing

Microsoft patches 56 vulnerabilities, 7 zero days fixed

Microsoft has patched 56 vulnerabilities in its latest update, including seven zero-day flaws, six of which have been actively exploited.

By Kaleah Salmon • 3 min read • Tue, 18th Mar 2025
February 2025 reports record spike in ransomware attacks
Ransomware

February 2025 reports record spike in ransomware attacks

A recent Bitdefender report reveals February 2025 as the worst month for ransomware, with victims rising 126% to 962, including a notable impact on Australia.

By Sean Mitchell • 3 min read • Mon, 17th Mar 2025
Mandiant uncovers UNC3886 cyber-attack on Juniper routers
Malware

Mandiant uncovers UNC3886 cyber-attack on Juniper routers

Mandiant has uncovered a sophisticated cyber espionage campaign by the China-linked group UNC3886, targeting outdated Juniper Networks routers with advanced malware.

By Sean Mitchell • 3 min read • Thu, 13th Mar 2025
Exclusive: Cyber threats escalate as Australian organisations face sophisticated attacks
Ransomware

Exclusive: Cyber threats escalate as Australian organisations face sophisticated attacks

Australian organisations face escalating cyber threats as ransomware groups adopt advanced tactics previously seen only in state-sponsored attacks.

By Melania Watson • 5 min read • Thu, 6th Mar 2025
Australia ranks fourth in global cybersecurity attack list
IoT Security

Australia ranks fourth in global cybersecurity attack list

Australia has climbed to fourth place globally for cyberattacks on critical infrastructure, as a report reveals a surge in diverse threats targeting various sectors.

By Melania Watson • 3 min read • Thu, 27th Feb 2025

Stories from Other Regions

Common Vulnerabilities and Exposures (CVE) stories

CVE system secures 11-month extension worth USD $44 million
Advanced Persistent Threat Protection

CVE system secures 11-month extension worth USD $44 million

CISA extends its contract with MITRE for another 11 months at USD $44 million, securing the critical CVE vulnerability programme amid funding concerns.

By Shannon Williams • 3 min read • Thu, 17th Apr 2025
GitHub Action compromise affects over 23,000 repositories
Supply Chain

GitHub Action compromise affects over 23,000 repositories

A malicious commit in the tj-actions/changed-files GitHub Action, used in over 23,000 repositories, threatens software security across numerous CI pipelines.

By Kaleah Salmon • 3 min read • Thu, 20th Mar 2025
March Patch Tuesday reveals 57 vulnerabilities
Cybersecurity

March Patch Tuesday reveals 57 vulnerabilities

Microsoft has revealed it will fix 57 vulnerabilities in its March 2025 Patch Tuesday update, including six previously exploited in the wild.

By Adam Barnett • 7 min read • Wed, 12th Mar 2025