A week ago, the security researcher who goes by “Nightmare Eclipse” published information about RoguePlanet, a zero-day ...

Anthropic’s Mythos Preview found 23,019 candidate vulnerabilities in open-source projects, exposing a widening gap between AI ...

A new CISA directive moves federal agencies beyond severity scores and toward a risk-based patching model that prioritizes ...

Still, it’s safe to assume AI played a major role. As Tom Gallagher, VP of engineering at Microsoft Security Response Center, ...

Atlassian and Splunk have released patches for critical vulnerabilities, including dozens of flaws in third-party ...

In April, AI company Anthropic announced it had created an AI tool called “Mythos” that was extremely adept at finding ...

A recent study validated against 28,377 real-world vulnerabilities offers a concrete replacement: A three-layer decision tree incorporating CISA KEV status, Exploit Prediction Scoring System (EPSS) ...

Microsoft's June 2026 Patch Tuesday update fixes 206 vulnerabilities, including all zero-days disclosed by Nightmare Eclipse ...

Emphere, a Seattle startup that emerged from the AI2 Incubator, raised $2.1 million in pre-seed funding to automatically fix vulnerabilities found in popular open-source distributions, catering to ...

According to Verizon's 2024 Data Breach Investigations Report, cyberattacks and data breaches involving the exploitation of vulnerabilities have almost tripled compared to previous years. Our recent ...

Update, Dec. 07, 2024: This story, originally published Dec. 06 now includes a statement from Microsoft about the new Windows zero-day vulnerability and further information about the 0patch ...

For years, patch management has been one of the least glamorous yet most consequential aspects of IT operations. Vulnerabilities emerge daily, and while most administrators know the importance of ...