loader image
Adobe ColdFusion Flaws Allow Remote Code Execution

Adobe has issued a crucial security update to address significant vulnerabilities in ColdFusion 2025 and 2023. These Adobe ColdFusion flaws, rated Priority 1, pose a risk for arbitrary code execution and privilege escalation. Affected versions include ColdFusion 2025 Update 9 and earlier, and ColdFusion 2023 Update 20 and earlier. The company strongly advises users to […]

Microsoft Pulls Forward Post-Quantum to 2029

Microsoft pulls forward its post-quantum cryptography timeline, setting a new target for 2029. This acceleration stems from recent advancements in quantum computing, which pose a growing threat to traditional encryption methods. Microsoft Azure’s Chief Technology Officer, Mark Russinovich, emphasized that these developments have altered the risk landscape. The tech giant is underscoring the urgency to […]

Amazon Fined $2.25M for Withholding Records

Amazon has agreed to pay a $2.25 million civil penalty following an allegation from the U.S. Federal Trade Commission (FTC) that the company obstructed identity theft victims from accessing crucial transaction records. The settlement stems from charges that Amazon intentionally withheld this information, which could aid victims in managing the impact of fraudulent activity on […]

Apple Patches Dozens of iOS, macOS, Safari Flaws

Apple has issued crucial updates for iOS, macOS, and Safari to patch numerous vulnerabilities that could affect users of iPhone, iPad, Mac, and its web browser. The company focused on strengthening security in several key components, including WebKit, the kernel, WebRTC, and Web Extensions. These vulnerabilities posed significant risks by potentially allowing attackers to execute […]

Cisco Acquires WideField to Boost Splunk SOC

Cisco has announced its intention to acquire WideField Security, a strategic move that aims to enhance Splunk’s Agentic Security Operations Center. By obtaining WideField, Cisco seeks to bolster its threat investigation capabilities, broadening the focus to include identity, credentials, sessions, and blast radius. This acquisition aligns with Cisco’s strategy to deliver comprehensive security solutions, reinforcing […]