Tag: Exposures
- 
		
		
		Alerts: CISA Adds One Known Exploited Vulnerability to CatalogSource URL: https://www.cisa.gov/news-events/alerts/2025/03/31/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose… 
- 
		
		
		The Register: Cardiff’s children’s chief confirms data leak 2 months after cyber risk was ‘escalated’Source URL: https://www.theregister.com/2025/03/28/cardiff_childrens_chief_says_city/ Source: The Register Title: Cardiff’s children’s chief confirms data leak 2 months after cyber risk was ‘escalated’ Feedly Summary: Department director admits Welsh capital’s council still trying to get heads around threat of dark web leaks Cardiff City Council’s director of children’s services says data was leaked or stolen from the organization,… 
- 
		
		
		Alerts: CISA Adds One Known Exploited Vulnerability to CatalogSource URL: https://www.cisa.gov/news-events/alerts/2025/03/27/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant… 
- 
		
		
		Alerts: CISA Adds Two Known Exploited Vulnerabilities to CatalogSource URL: https://www.cisa.gov/news-events/alerts/2025/03/26/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability These types of vulnerabilities… 
- 
		
		
		Alerts: CISA Adds Two Known Exploited Vulnerabilities to CatalogSource URL: https://www.cisa.gov/news-events/alerts/2025/03/26/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability These types of vulnerabilities… 
- 
		
		
		Alerts: CISA Adds One Known Exploited Vulnerability to CatalogSource URL: https://www.cisa.gov/news-events/alerts/2025/03/24/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-30154 reviewdog action-setup GitHub Action Embedded Malicious Code Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and… 
- 
		
		
		Wired: Using Starlink Wi-Fi in the White House Is a Slippery Slope for US Federal ITSource URL: https://www.wired.com/story/white-house-starlink-wifi/ Source: Wired Title: Using Starlink Wi-Fi in the White House Is a Slippery Slope for US Federal IT Feedly Summary: The ad hoc addition to the otherwise tightly controlled White House information environment could create blind spots and security exposures while setting potentially dangerous precedent. AI Summary and Description: Yes **Summary:** The… 
- 
		
		
		Alerts: CISA Adds Three Known Exploited Vulnerabilities to CatalogSource URL: https://www.cisa.gov/news-events/alerts/2025/03/19/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability These… 
- 
		
		
		Cloud Blog: A framework for adopting Gemini Code Assist and measuring its impactSource URL: https://cloud.google.com/blog/products/application-development/how-to-adopt-gemini-code-assist-and-measure-its-impact/ Source: Cloud Blog Title: A framework for adopting Gemini Code Assist and measuring its impact Feedly Summary: Software development teams are under constant pressure to deliver at an ever-increasing pace. As sponsors of the DORA research, we recently took a look at the adoption and impact of artificial intelligence on the software…