SAP released 20 security notes on April 2025 patch day, including three addressing critical code injection and authentication ...

An update for the WhatsApp desktop app for Windows patches CVE-2025-30401, a spoofing vulnerability that could be used to ...

Android’s latest security update resolves two exploited Kernel vulnerabilities, as well as critical-severity bugs.

More than 5,000 Ivanti Connect Secure appliances are vulnerable to attacks exploiting CVE-2025-22457, which has been used by ...

Corsha raised $18 Million to expand its machine identity platform (m-IdP) that authenticates, manages, and governs traffic between machines.

PCI DSS 4.0.1 is a major new version but remains true to the council’s principles and focuses on 'What' Matters in ...

A sophisticated APT tracked as ToddyCat has exploited an ESET DLL search order hijacking vulnerability for malware delivery.

Silicon Valley startup secures big investment from Menlo Ventures and Mayfield Fund to solve the “shadow AI” security problem.

NIST has marked pre-2018 CVEs in NVD as ‘Deferred’ and will no longer spend resources on enriching them as it works to clear ...

Tailscale’s new Series C funding round brings the total raised by the company for its secure networking platform to $275 million.

Experimental Sec-Gemini v1 touts a combination of Google’s Gemini LLM capabilities with real-time security data and tooling ...

Huntress has shared details on the post-exploitation activities of threat actors targeting the recent CrushFTP vulnerability.