The Cybersecurity and Infrastructure Security Agency has added the Spring4Shell remote code execution vulnerability impacting the Spring Framework to its Known Exploited Vulnerabilities Catalog.

GitLab has issued patches to address a critical severity account takeover flaw, which is impacting GitLab Community Edition and Enterprise Edition versions prior to 14.7.7, 14.8.5, and 14.9.2.

More than 100 high-value Mailchimp customers in the cryptocurrency and finance industries had their data exfiltrated as a result of a breach on one of the email marketing firm's internal tools.

General Paul Nakasone, Director of the NSA and U.S. Cyber Command, argued that deployments not only provide crucial assistance in the digital realm to allies or friendly nations like Ukraine, they also redound to the larger benefit of U.S. domestic critical infrastructure and the private sector that can ingest the latest information from the front lines to help secure their own systems.

A recently proposed bill partnering HHS with CISA has received strong support from healthcare stakeholder groups, but leaders stress under-resourced and smaller providers need more immediate support.

More state cybersecurity leaders have been working to ensure their organizations' cloud IT vendors have products that meet certification program standards.

Antimatter announced its exit from stealth mode with $12 million raised in a Series A funding round, allowing the company to begin private beta for its service, which allows software-as-a-service firms to guarantee their customers' data security.

Amazon Web Services and Palo Alto Networks have partnered for the roll-out of the Palo Alto Networks Cloud NGFW for AWS, marking the first-ever native integration of Palo Alto's next-generation firewall into the public cloud.