Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
635 articles about Vulnerabilities
Decision Insights Signals • November 18, 2025
Hackers are increasing their monitoring of UK organisations through company laptops and mobiles, with malicious online scans up 300% in a year
Decision Insights Threat Desk • November 18, 2025
Lectora software versions 21.0–21.3 and 7.1.6 and older had an XSS vulnerability. A patch in version 21.4 requires republishing courses.
Decision Insights Threat Desk • November 18, 2025
Over 500 npm packages compromised in a recent supply chain attack involving credential theft and malware propagation per Socket.
Decision Insights Threat Desk • November 18, 2025
A remote code execution vulnerability was found in Vigor routers by Draytek, allowing attackers to inject commands via HTTP requests.
Decision Insights Threat Desk • November 18, 2025
SynchroWeb's Kiwire Captive Portal has three web vulnerabilities identified, prompting users to update their systems for security.
Decision Insights Threat Desk • November 18, 2025
Clevo's firmware updates revealed private keys for Intel Boot Guard, risking UEFI security on affected systems due to potential exploitation.
Decision Insights Threat Desk • November 18, 2025
A vulnerability in CORS headers across several browsers allows manipulation of policies, enabling attackers to send unauthorized requests. Users should ensure their browsers are updated with the latest patches.
Decision Insights Threat Desk • November 18, 2025
Browser extensions for password management may face clickjacking risks due to DOM manipulation, prompting users to take security measures.
Decision Insights Threat Desk • November 18, 2025
Email header syntax can be exploited to bypass SPF, DKIM, and DMARC, allowing attackers to send spoofed messages from trusted addresses.
Decision Insights Threat Desk • November 18, 2025
Lite XL has vulnerabilities allowing arbitrary code execution in versions 2.1.8 and prior. Users should update to mitigate these risks.
Decision Insights Threat Desk • November 18, 2025
Wolfram Cloud version 14.2 allows JVM unrestricted access to the /tmp/ directory, posing risks of privilege escalation and information exfiltration.
Decision Insights Signals • November 18, 2025
Bitsight announces 50% year-over-year growth in the APAC region, driven by increased demand for cyber risk intelligence. Insights from Luminate Exchange Japan 2025 highlight vulnerabilities and threats faced by Japanese organizations, emphasizing the necessity of intelligence-driven visibility in cybersecurity efforts.