Researcher Ryan Dewhurst released the WPScan Vulnerability Database, a database housing security vulnerabilities in WordPress core code, plug-ins and themes. It’s available for pen-testers, WordPress ...

Drupal has patched CVE-2026-9082, a highly critical vulnerability that could allow threat actors to hack websites.

Get the latest federal technology news delivered to your inbox. Despite goals set last year by the National Institute of Standards and Technology to process a backlog of unanalyzed cybersecurity ...

The National Vulnerability Database (NVD) is well known in IT security as the source of record for all vulnerabilities which have been assigned a CVE (Common Vulnerabilities and Exposures) enumeration ...

Juhan Lepassaar, Executive Director at ENISA. Image: Hubert Burda Media/Flickr The announcement comes after concerns that the US government would stop funding the operations of MITRE, the nonprofit ...

The U.S. government today extended a contract through which it finances the CVE Program, the cybersecurity industry’s go-to database of software vulnerabilities. The U.S. Cybersecurity and ...

The European Union Agency for Cybersecurity (Enisa) has debuted a European Union Vulnerability Database (EUVD) to provide “aggregated, reliable and actionable” information on newly disclosed cyber ...

Organizations traditionally have struggled to track vulnerabilities in public cloud platforms and services because of the lack of a common vulnerability enumeration (CVE) program like the one that ...

Microsoft’s May 2026 Patch Tuesday release addresses 138 security vulnerabilities across Windows and related products, but one flaw towers above the rest: a remote code execution bug in the Windows ...