The packages were installed more than 1,700 times each prior to their removal from the repository.

Shadowserver reports 2,000 firewalls were hacked just two days after CISA put the two PAN-OS bugs on the KEV catalog.

LLM capabilities boosted OSS-Fuzz’s coverage and helped find a 20-year-old flaw in OpenSSL.

SentinelLabs reveals information on four previously unreported Chinese front companies taken down by the U.S. government Oct. 10.

The five vulnerabilities could lead to local privilege escalation without user interaction.

Women are increasingly taking on top roles within Russian-speaking threat actor groups.

China’s campaign against U.S. telecoms has been ongoing for years.

Identity protection in healthcare was a dominant theme at last week’s Semperis HIP conference, with many participants offering guidance on how to improve medical cybersecurity.

Easterly has led the agency since July 2021 and was instrumental in driving the Secure by Design initiative.

Security pros say Helldown aims for maximum impact by targeting VMware systems.