As the agency’s vulnerability database buckles under a flood of submissions, it’s planning to shift some responsibilities to other parties.

The numbers tell a stark story: $1.42 billion lost across 149 documented incidents in 2024 due to smart contract vulnerabilities, with access control ...

An aardvark works in an office typing at a desktop PC while happy human workers mill about in the background. Credit: VentureBeat made with ChatGPT Positioned as a scalable defense tool for modern ...

Update, May 11, 2025: This story, originally published May 9, has been updated with more details on the move towards greater cloud Common Vulnerabilities and Exposures (CVE) transparency by both ...

This disclosure is provided to ensure transparency regarding the author’s professional background and potential biases. The author has maintained both collaborative and contentious relations with DJI, ...

Cloud environments are dynamic by design. New identities are created, policies adjusted, and workloads deployed or retired several times a day. Yet many organizations continue to rely on scanning and ...

As 2025 closes, the defining highlight in global security is not a single war but a systemic shift in how power is exercised and conflict is fought. The world moved further away from formally declared ...

Fortinet released security updates to patch a critical remote code execution vulnerability exploited as a zero-day in attacks targeting FortiVoice enterprise phone systems. The security flaw is a ...

Anthropic has launched Cowork with a known data exfiltration vulnerability that researchers reported in October 2025 but ...

A vulnerability in SmarterTools’ SmarterMail platform could lead to remote code execution on vulnerable mail servers.