Stay updated with breaking news from Vulnerability Database. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Over 90% of new security flaws submitted to the National Institute of Standards and Technology's National Vulnerability Database since funding was reduced in early February continued to lack analysis or enrichment that would enable discovery of impacted software, reports The Record, a news site by cybersecurity firm Recorded Future.
Software Development News
Nation-state attackers apparently backdoored widely used, open-source data compression software as part of a supply chain attack. Malicious code inserted into
WordPress site takeover is possible without authentication via the actively exploited vulnerability.
Ivanti reported that it believes malicious code has been added to exploited Connect-Secure and Policy Secure products that allows a threat actor future access, even after mitigation is applied.