Vulnerability Management

Thousands of WordPress sites are vulnerable through at least four different JavaScript backdoors.

Broadcom advises security teams to apply the patches right away.

CISS urges organizations to immediately patch the critical Microsoft and Synacor Zimbra bugs.

BlackDuck finds that 86% of application codebases contain vulnerabilities.

Dozens of apartment buildings in the U.S. and Canada have been exposed.

Federal agencies are urged to remediate the issue by Mar. 13.

Newly appointed U.S. Director of National Intelligence Tulsi Gabbard has been urged by Sen. Ron Wyden, D-Ore., and Rep. Andy Biggs, R-Ariz., to oppose the UK's reported order for Apple to develop a backdoor that would enable government access to encrypted iCloud data, which they argued to be detrimental to U.S. government and citizen data security, according to The Register.

SecurityWeek reports that open-source database management system PostgreSQL has been impacted by a new zero-day flaw, tracked as CVE-2025-1094, which has been leveraged as part of the attacks against vulnerable BeyondTrust Remote Support systems that impacted the U.S. Treasury Department.