IT Brief Canada - Technology news for CIOs & IT decision-makers

Common Vulnerabilities and Exposures (CVE) stories - Page 2

Techday f c8cba525d68bdc0d379c

Red Hat Enterprise Linux 10 brings AI & post-quantum security

Wed, 21st May 2025
#
devops
#
hybrid cloud
#
hyperscale
Red Hat launches Enterprise Linux 10, featuring AI integration, enhanced security with post-quantum cryptography, and hybrid cloud support for enterprises.
Techday f 6f1ad67e5de750c54dd1

Emojis used to hide attacks & bypass major AI guardrails

Wed, 7th May 2025
#
genai
#
llms
#
ai
Mindgard reveals emoji smuggling can bypass AI guardrails from Microsoft, Meta, Nvidia, and others with up to 100% attack success, raising serious security concerns.
Techday f 5181b50a78f4a9393490

Black Kite launches tool for third-party vulnerability insight

Fri, 2nd May 2025
#
ransomware
#
supply chain
#
breach prevention
Black Kite launches Vulnerability Intelligence Briefs to help organisations identify and manage third-party cyber risks, enhancing supply chain security.
Techday f fdc2407ad31076bf45e6

Minimus launches with USD $51 million to cut 95% of CVEs

Wed, 30th Apr 2025
#
cloud security
#
application security
#
supply chain
Minimus launches with USD $51 million to cut 95% of CVEs in software supply chains, offering secure components and faster vulnerability reduction.
Techday f 8260c5171e8784aa0e54

Armis offers free access to real-time cyber threat database

Thu, 24th Apr 2025
#
firewalls
#
network security
#
advanced persistent threat protection
Armis launches free Vulnerability Intelligence Database to help security teams anticipate and tackle cyber threats with real-time, AI-driven insights.
Techday f baf9fd9d2acc248ec010

Future of CVE repository in doubt as MITRE contract ends

Thu, 17th Apr 2025
#
advanced persistent threat protection
#
cybersecurity
#
cyber threat
Concerns rise as MITRE's contract to manage the CVE vulnerability database nears expiry, risking disruption to global cybersecurity infrastructure.
Techday f 9184a27e187c1e60bc47

US funding lapse casts uncertainty over global CVE system

Thu, 17th Apr 2025
#
cybersecurity
#
incident response
#
infosecurity europe
US government funding for MITRE's CVE programme has expired, risking disruption to global cybersecurity efforts and vulnerability tracking systems.
Techday f 79b96508a8d794789418

Microsoft April Patch Tuesday highlights zero-day risks

Fri, 11th Apr 2025
#
ransomware
#
cybersecurity
#
microsoft
Microsoft's recent Patch Tuesday sparked scrutiny with a 40-minute delay in updates and notable vulnerabilities, including a critical zero-day in the CLFS Driver.
Techday f efc9ba3070861ef7fadd

Zscaler report urges shift from VPNs to Zero Trust

Fri, 11th Apr 2025
#
vpns
#
ransomware
#
cloud security
Zscaler's 2025 ThreatLabz VPN Risk Report reveals soaring VPN usage in Australia but warns of heightened security risks, urging a shift to Zero Trust architectures.
Techday f 98f575a5e8a51a996324

N-able launches new feature to boost vulnerability management

Fri, 11th Apr 2025
#
advanced persistent threat protection
#
cybersecurity
#
windows
N-able has launched a new Vulnerability Management feature for its UEM products, enhancing risk mitigation for organisations amid rising cyber threats.
Techday f 35018f305bd0d626e0a1

RunZero expands platform for enhanced exposure management

Tue, 8th Apr 2025
#
risk & compliance
#
omdia
#
asset discovery
runZero has unveiled an expanded platform to enhance exposure management, promising to aid organisations in effectively managing risk across their attack surfaces.
Techday b80e586b58ecbe1e7ea4

Kaspersky discovers & patches zero-day Chrome flaw

Thu, 3rd Apr 2025
#
malware
#
edutech
#
endpoint protection
Kaspersky has uncovered and patched a critical zero-day vulnerability in Google Chrome, enabling attackers to bypass sandbox protections via malicious links.
Ps jack meltzer headshot 2023  2

Building a culture of cyber hygiene

Tue, 18th Mar 2025
#
data protection
#
phishing
#
physical security
As cyber attacks surge, the World Economic Forum warns of a widening skills gap, urging organisations to foster a culture of cyber hygiene for better security.
Techday eb33571295140d6fed56

JFrog & Hugging Face join forces to secure AI models

Tue, 18th Mar 2025
#
advanced persistent threat protection
#
supply chain
#
ai security
JFrog has partnered with Hugging Face to enhance security for machine learning models, boosting safety measures on the Hugging Face Hub against potential threats.
Techday aabb68e53e66032247be

Microsoft patches 56 vulnerabilities, 7 zero days fixed

Tue, 18th Mar 2025
#
phishing
#
email security
#
cybersecurity
Microsoft has patched 56 vulnerabilities in its latest update, including seven zero-day flaws, six of which have been actively exploited.
Techday f 260de8b293e529df450a

February 2025 reports record spike in ransomware attacks

Mon, 17th Mar 2025
#
ransomware
#
semiconductors
#
soc
A recent Bitdefender report reveals February 2025 as the worst month for ransomware, with victims rising 126% to 962, including a notable impact on Australia.
Techday 47ea68bd8b550d631c69

Mandiant uncovers UNC3886 cyber-attack on Juniper routers

Thu, 13th Mar 2025
#
malware
#
firewalls
#
network infrastructure
Mandiant has uncovered a sophisticated cyber espionage campaign by the China-linked group UNC3886, targeting outdated Juniper Networks routers with advanced malware.
Techday f f25faff594d15f68113c

Australia ranks fourth in global cybersecurity attack list

Thu, 27th Feb 2025
#
iot security
#
wireless networks
#
cybersecurity
Australia has climbed to fourth place globally for cyberattacks on critical infrastructure, as a report reveals a surge in diverse threats targeting various sectors.
Techday 6fc17d3302c9925ceb9a

2025 forecast predicts a rise in global cyber threats

Wed, 26th Feb 2025
#
risk & compliance
#
cybersecurity
#
cyber espionage
The Forum of Incident Response and Security Teams predicts a staggering 45,505 reported vulnerabilities for 2025, marking an 11% rise from 2024.
Techday 23efb6e8c0a831875354

FBI & CISA warn of Ghost ransomware threats worldwide

Tue, 25th Feb 2025
#
malware
#
ransomware
#
advanced persistent threat protection
The FBI and CISA have alerted organisations to increased cyber threats from China's Ghost ransomware group, affecting over 70 countries through outdated software.