Common Vulnerability Scoring System News Today

The threat environment will continue to grow in complexity. Organizations need to streamline how they manage and mitigate overlooked vulnerabilities.

It's time to rethink the pivotal role incentives play in shaping behavior to find and disclose software vulnerabilities. More accurate guidance to reflect real-world risks and a tiered verification process to establish potential impact could slow misleading submissions.

TP-Link has issued an important firmware update for its Archer C5400X wireless router for gamers, a popular tri-band model that debuted several years ago and was branded as being recommended for NVIDIAs GeForce NOW cloud gaming service.

A crisis at the key US service for ranking vulnerabilities has been fueled by short resources and an explosion of security flaws as the volume of software production increases.

There is a problem in cybersecurity where experts tend to recycle the same predictable analysis and consensus while ignoring the possibility of unexpected events.

Over 67% of all reported WordPress vulnerabilities were medium-level. These are the facts that you need to know.

In the infosec world we continually preach about “defense in depth,” or layered security. The idea is that if a defensive measure at one layer fails, there are additional layers behind it that serve as a safety net. An interesting application of these concepts comes in examining the data feeds that provide information to our security tools. If one of the feeds goes down, will our security tooling continue to work as expected?

2024 WPScan WordPress security report shows the mistakes that many sites keep making and leads to compromised websites

Cisco fixes high-risk flaws in the out-of-band management controller of multiple products

Windows users who have upped their authentication game by using a hardware YubiKey security key have been warned a vulnerability could expose their systems to attack.