Vulnerability ManagementNew Vulnerability Exposes YubiKey 5 Devices to Cloning AttacksCRA News ServiceSeptember 5, 2024All YubiKey 5 Series auth devices older than firmware v5.7, and Infineon microchips in the devices' Infineon cryptographic library, are at risk.
Vulnerability ManagementMicrosoft Touts Mitigation for CLFS VulnerabilityCRA News ServiceSeptember 5, 2024Microsoft is touting a mitigation for common CLFS vulnerabilities.
Risk Identification/Classification/MitigationRisk of Cyberattack is Highest in ColoradoCRA News ServiceSeptember 5, 2024Colorado faces the highest risk of a cyberattack, according to a Kiteworks survey.
Bug BountiesBroadcom Issues Fixes for VMware Fusion FlawCRA News ServiceSeptember 4, 2024Broadcom issued fixes for a critical VMware Fusion flaw.
Vulnerability ManagementWhatsUp Gold Flaw Could Lead to RCE, System HijackingCRA News ServiceSeptember 3, 2024A vulnerability in WhatsUp Gold could lead to enterprise environments being taken over.
Bug BountiesGoogle Beefs Up Chrome Bug Bounty ProgramCRA News ServiceAugust 29, 2024Google is offering greater rewards for its Chrome bug bounty program.
Breach and attack simulationBlackByte Targets VMware ESXi Authentication FlawCRA News ServiceAugust 29, 2024BlackByte is targeting vulnerable VMware ESXi instances, according to Cisco Talos threat intelligence.