CSOonline

New EU vulnerability database will complement CVE program, not compete with it, says ENISA

After the CVE’s program’s near-death experience in April, might the Europeans be looking for a more reliable long-term system? From this week, the global technology industry has a new database to ...
Infosecurity MagazineOpinion

Beyond the Score: Rethinking Vulnerability Management in a Contextual Era

The Exploit Prediction Scoring System (EPSS) has emerged as an effective tool for complementing CVSS because it estimates the ...
City & State New York

NYPD officer database had security flaws that could have let hackers covertly modify officer data

A database used to track NYPD officer profiles contained security flaws that would have allowed a skilled-enough hacker to add, remove or modify data entries and insert potentially malicious files ...
CSO Online

Vulnerability in Salesforce AI could be tricked into leaking CRM data

Salesforce Agentforce allowed attackers to hide malicious instructions in routine customer forms, tricking the AI into ...
ZDNet

Why the CVE database for tracking security flaws nearly went dark - and what happens next

Over the weekend, security experts were beginning to panic. MITRE announced that the US government had not renewed funding for the Common Vulnerabilities and Exposures (CVE) database. MITRE VP Yosry ...
American Banker

The cybersecurity database the government nearly defunded

For a few hours this week, the future of the Common Vulnerabilities and Exposures (CVE) Program — a database used by companies and governments to learn about new security holes in the software they ...
MacRumors

Security Database Used by Apple Goes Independent After Funding Cut [Updated]

Update: Following the CVE Foundation's announcement (below), CISA has said the U.S. government is extending funding to ensure no continuity issues with the critical Common Vulnerabilities and ...

DOGE's insecure Social Security database part of secretive cybersecurity nightmare, report claims

Gary Peters, HSGAC's six-month investigation concluded that DOGE's mishandling of data has put U.S. citizens at high risk ...
Forbes

Microsoft Confirms Critical Windows Defender Security Vulnerability

A Dec. 12 posting to Microsoft’s security update guide has confirmed that a Windows Defender vulnerability, rated as critical according to Microsoft itself, could have enabled an attacker who ...
Infosecurity Magazine

Critical Vulnerability in Salesforce AgentForce Exposed

A critical vulnerability chain in Salesforce's AI-powered AgentForce platform has been discovered by cybersecurity researchers. The flaw, known as ForcedLeak, carried a severity score of 9.4 and could ...
Automation World

Gauge Cyber-security Vulnerability

Wurldtech says its newly launched database can help industrial companies identify cyber-security risks and make better decisions to protect their operations. Wurldtech Security Technologies Inc., a ...
Gizmodo

Signal Is Working to Close a Security Vulnerability in Its Desktop App

Telegram is fixing a flaw in the security of its desktop app that has lingered for years. As reported by BleepingComputer, Signal’s Desktop app on both Windows and Mac creates an SQLite database when ...