Common Vulnerabilities and Exposures (CVE) Stories

Australian Stories

Common Vulnerabilities and Exposures (CVE) stories

Vulnetix named Australia's first global CVE authority

Australian developers can now access free vulnerability tools as Vulnetix takes a formal role in global software flaw tracking.

By Mark Tarre • 3 min read • Last month

Global Stories

Common Vulnerabilities and Exposures (CVE) stories

Security Operations Centres

Black Kite says 58 CVEs pose critical supply threat

Only a small fraction of disclosed flaws are likely to hit suppliers, leaving security teams to focus on the 58 highest-risk CVEs.

By Sean Mitchell • 5 min read • Last week

Digital Transformation

Synack report says vulnerability testing gap widens

Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.

By Mark Tarre • 4 min read • This month

Ransomware

Intruder finds exposed MySQL databases in 26% of firms

The findings show many firms still leave internet-facing databases and admin tools open, giving attackers easy routes before flaws are even published.

By Sean Mitchell • 4 min read • This month

Ransomware

Qilin drives 43% rise in ransomware attacks

Ransomware activity stayed elevated in March, with NCC Group saying Qilin alone was linked to 136 attacks and drove a 43% monthly rise.

By Catherine Knowles • 4 min read • This month

Cloud Security

TrendAI deepens Anthropic tie-up with Claude Opus 4.7

Security teams may get faster risk rankings as TrendAI adds Claude Opus 4.7 to its platform to spot exploitable flaws and apply interim controls.

By Mark Tarre • 4 min read • This month

Privileged Access Management

Critical Microsoft vulnerabilities double in yearly report

Critical Microsoft flaws surged as Azure, Dynamics 365 and Office saw big jumps, even though total vulnerabilities fell 6% in 2025.

By Joseph Gabriel Lagonsin • 3 min read • Last month

IoT Security

FIRST conference highlights AI & CVE disclosure push

Pressure is growing on AI vendors and software suppliers to improve vulnerability disclosure as experts warn basic CVE details are no longer enough.

By Joseph Gabriel Lagonsin • 3 min read • Last month

Endpoint Protection

Splashtop launches unified IT platform for endpoints

Small IT teams get a single console for patching, remote support and security alerts as endpoint management and response are merged globally.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Hybrid Cloud

Forrester says Anthropic AI could break patch playbook

Faster AI-led flaw discovery could overwhelm patching and disclosure processes, leaving companies with bigger backlogs and less time to respond.

By Sean Mitchell • 4 min read • Last month

Virtualisation

Intruder adds container image scanning to cloud platform

The update gives security teams earlier warning on vulnerable container images before they reach production, reducing blind spots across cloud estates.

By Catherine Knowles • 3 min read • Last month