Vulnerability Management

Over 20K internet-exposed VMware ESXi hypervisors are impacted by the actively exploited CVE-2024-37085.

Google issued a number of Chrome updates that protect cookies and patch vulnerabilities.

CISA is urging organizations to patch critical ServiceNow bugs by August 19.

Unauthorized access to other services and data could be achieved by threat actors through the exploitation of the new "ConfusedFunction" privilege escalation vulnerability in Google Cloud Platform's Cloud Functions service.

MSPs are pulling together to help during the CrowdStrike outage. That's what community is all about.

SC Magazine reported on the CrowdStrike update that sparked a worldwide IT outage.

Cisco has issued patches for a maximum severity flaw impacting its Smart Software Manager On-Prem license servers and older installations of SSM On-Prem, also known as Cisco Smart Software Manager Satellite.

An accidentally exposed GitHub authentication token enabled possible infiltration of GitHub repositories for the Python programming language, which could open the potential for significant software supply chain attacks.