The two issues aren't believed to be chained in the attacks. Ivanti said that CVE-2025-0282 is the exploited zero-day, but ...

Put very simply, only use a fully encrypted platform. That means Signal or WhatsApp or iMessage (if strictly between Apple users) or Google Messages (if strictly between Android users). Do’t message ...

Mandiant says a Chinese cyberespionage group has been exploiting the critical-rated vulnerability since at least mid-December.

Palo Alto Networks has released patches for multiple vulnerabilities in the Expedition migration tool, which was retired on ...

Google Cloud’s Mandiant has linked the exploitation of CVE-2025-0282, a new Ivanti VPN zero-day, to Chinese cyberspies.

The US Cybersecurity and Infrastructure Security Agency (CISA) has stated that there is no evidence suggesting other federal ...

Ivanti's CVE-2025-0282 flaw, exploited by China-linked actors, enables remote code execution. CISA demands urgent patching by ...

CISA lists critical flaws in Mitel MiCollab (CVE-2024-41713, CVE-2024-55550) and Oracle WebLogic (CVE-2020-2883).

GitLab's Joel Krooswyk explains the four changes in federal cybersecurity that will be driven by greater use of artificial ...

Cybercriminals are actively exploiting two vulnerabilities in Mitel MiCollab, including a zero-day flaw, alongside a critical ...

WISeKey, a global leader in cybersecurity, has integrated post-quantum capabilities into its Root of Trust and comprehensive PKI suite of solutions. These innovations provide end-to-end encryption and ...