IT Brief UK - Technology news for CIOs & IT decision-makers
United Kingdom

Common Vulnerabilities and Exposures (CVE) Stories

UK Stories

Common Vulnerabilities and Exposures (CVE) stories

RoboShadow joins Pax8 Marketplace for MSP security
Cloud Security

RoboShadow joins Pax8 Marketplace for MSP security

MSPs could cut vulnerability triage and compliance reporting time by up to 80% after RoboShadow's platform was added to Pax8 Marketplace.

By Joseph Gabriel Lagonsin • 4 min read • This month

Global Stories

Common Vulnerabilities and Exposures (CVE) stories

Dify flaws expose cross-tenant AI data, Zafran says
Application Security

Dify flaws expose cross-tenant AI data, Zafran says

Users of Dify's cloud service could have had private chats and files exposed after Zafran Security disclosed four flaws in the AI platform.

By Mark Tarre • 4 min read • Yesterday
Chainguard named Gartner leader in software supply security
Cloud Security

Chainguard named Gartner leader in software supply security

The recognition underlines rising demand for tools that secure software builds before attackers can exploit open source dependencies and pipelines.

By Mark Tarre • 4 min read • 2 days ago
Cato Networks joins OpenAI cyber partner programme
Data Protection

Cato Networks joins OpenAI cyber partner programme

Enterprise security teams could gain faster defences as Cato Networks folds OpenAI's cyber tools into workflows to tackle newly disclosed flaws.

By Mark Tarre • 4 min read • 2 days ago
Finite State to spotlight automotive supply chain security
Cloud Security

Finite State to spotlight automotive supply chain security

Carmakers face tougher proof requirements as software-heavy vehicles multiply vulnerabilities across suppliers, apps and cloud systems.

By Joseph Gabriel Lagonsin • 4 min read • 3 days ago
Patchstack & GoDaddy add WordPress vulnerability detection
Security Operations Centres

Patchstack & GoDaddy add WordPress vulnerability detection

Eligible Managed WordPress customers gain visibility into flaws as they are disclosed, as WordPress attacks are being exploited within hours.

By Sean Mitchell • 4 min read • Last week
Broadcom expands Spring security for AI threat surge
Application Security

Broadcom expands Spring security for AI threat surge

Enterprises using Spring will get faster access to validated fixes as Broadcom responds to a 1700% surge in monthly security advisories.

By Joseph Gabriel Lagonsin • 4 min read • Last week
AISLE launches Snapshot for secure private cloud use
Data Protection

AISLE launches Snapshot for secure private cloud use

Regulated firms can now scan code for flaws without sending sensitive data to external AI services, as AISLE targets private deployments.

By Sofiah Nichole Salivio • 4 min read • Last week
Anthropic's Claude Fable 5 sparks cybersecurity warnings
Data Protection

Anthropic's Claude Fable 5 sparks cybersecurity warnings

Cybersecurity teams fear the release could speed up vulnerability hunting on both sides, forcing faster patching and tighter controls.

By Sean Mitchell • 5 min read • This month
Automotive cyber vulnerabilities surge 105%, PCA says
Cloud Security

Automotive cyber vulnerabilities surge 105%, PCA says

Connected cars face a widening attack surface as PCA flags 265 new flaws in the first quarter, with most exploitable without specialist tools.

By Joseph Gabriel Lagonsin • 4 min read • This month
Anthropic splits Claude Fable 5 amid cyber risk fears
Security Operations Centres

Anthropic splits Claude Fable 5 amid cyber risk fears

Guardrails may not stop attackers as Anthropic's split release underscores a widening gap between AI exploit discovery and patching.

By Sean Mitchell • 6 min read • This month
Liquibase launches free CVE library for Community users
DevOps

Liquibase launches free CVE library for Community users

Older Liquibase Community users can now check release-by-release vulnerabilities in a free public library covering Docker images and binaries.

By Joseph Gabriel Lagonsin • 4 min read • This month
RoboShadow joins Pax8 Marketplace for MSP security
Software-as-a-Service

RoboShadow joins Pax8 Marketplace for MSP security

MSPs could cut manual vulnerability work as RoboShadow's automation tools reach Pax8's 47,000-strong partner base through the cloud marketplace.

By Sofiah Nichole Salivio • 4 min read • This month
Averlon launches Precog to block exploitable risks
Cloud Security

Averlon launches Precog to block exploitable risks

Security teams are under pressure as attacks can now begin before patches land, making early risk detection critical.

By Joseph Gabriel Lagonsin • 4 min read • This month
Microsoft security landscape shifts as critical vulnerabilities surge: report
Digital Transformation

Microsoft security landscape shifts as critical vulnerabilities surge: report

Critical flaws in Microsoft software have nearly doubled, leaving enterprises facing a sharper risk profile despite fewer total vulnerabilities.

By James Maude • 4 min read • This month
Financial ransomware & supplier risks rise, report warns
Ransomware

Financial ransomware & supplier risks rise, report warns

Banks and investment firms face mounting exposure as ransomware incidents jump and more than half of vendors carry high-severity flaws.

By Karen Joy Bacudo • 4 min read • This month
Insight launches managed defence for AI-driven flaws
Data Protection

Insight launches managed defence for AI-driven flaws

Mid-sized firms facing faster exploits can now outsource patching, exposure scanning and threat monitoring under one contract.

By Sofiah Nichole Salivio • 3 min read • This month

Stories from Other Regions

Common Vulnerabilities and Exposures (CVE) stories