Apple Quashes Two Zero-Days With iOS, MacOS Patches

The vulnerabilities are described as code execution and mitigation bypass issues that affect Apple’s iOS, iPadOS and macOS platforms.
The post Apple Quashes Two Zero-Days With iOS, MacOS Patches appeared first on SecurityWeek.
Continue reading Apple Quashes Two Zero-Days With iOS, MacOS Patches

MITRE Warns CVE Program Faces Disruption Amid US Funding Uncertainty

MITRE warns of a deterioration of national vulnerability databases and advisories, slowed vendor reaction and limited response operations.
The post MITRE Warns CVE Program Faces Disruption Amid US Funding Uncertainty appeared first on SecurityWeek.
Continue reading MITRE Warns CVE Program Faces Disruption Amid US Funding Uncertainty

Virtue AI Attracts $30M Investment to Address Critical AI Deployment Risks

San Francisco startup banks $30 million in Seed and Series A funding led by Lightspeed Venture Partners and Walden Catalyst Ventures.
The post Virtue AI Attracts $30M Investment to Address Critical AI Deployment Risks appeared first on SecurityWeek.
Continue reading Virtue AI Attracts $30M Investment to Address Critical AI Deployment Risks

Huntress Documents In-The-Wild Exploitation of Critical Gladinet Vulnerabilities

The flaw, tagged as CVE-2025-30406, was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog in early April.
The post Huntress Documents In-The-Wild Exploitation of Critical Gladinet Vulnerabilities appeared first on SecurityWeek.
Continue reading Huntress Documents In-The-Wild Exploitation of Critical Gladinet Vulnerabilities

Trend Micro Flags Incomplete Nvidia Patch That Leaves AI Containers Exposed

Trend Micro researchers flagging problems with Nvidia’s patch for a critical, code execution vulnerability in the Nvidia Container Toolkit.
The post Trend Micro Flags Incomplete Nvidia Patch That Leaves AI Containers Exposed appeared first on SecurityW… Continue reading Trend Micro Flags Incomplete Nvidia Patch That Leaves AI Containers Exposed

Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle

The CVE-2025-22457 has already been exploited by a China-nexus hacking gang notorious for breaking into edge network devices.
The post Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle appeared first on SecurityWeek.
Continue reading Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle

Trump Revokes Security Clearance for Ex-CISA Director Chris Krebs

Trump orders a termination of any active security clearances held by Krebs and a suspension of clearances held by individuals at SentinelOne.
The post Trump Revokes Security Clearance for Ex-CISA Director Chris Krebs appeared first on SecurityWeek.
Continue reading Trump Revokes Security Clearance for Ex-CISA Director Chris Krebs