The number of newly discovered Linux and macOS vulnerabilities increased dramatically in 2024, according to new analysis from Action1. The cybersecurity vendor’s 2025 Software Vulnerability Ratings Report is based on in-depth analysis of the National Vulnerability Database (NVD) and SecurityScorecard’s CVEdetails.com site. By its reckoning, the total number of vulnerabilities discovered in 2024 rose by 61% annually to 6761, with Linux bugs increasing by an “unprecedented” 967% to 3329 for the year. Vulnerabilities in the…

Tenable®, the exposure management company, today announced powerful new enhancements to its flagship platform, Tenable One, with the introduction of Tenable One Connectors and customizable risk dashboards. These advancements — powered by Tenable ExposureAI™ and built on the Tenable Data Fabric — make Tenable One the most advanced exposure management solution available today. With third-party data connectors, organizations unlock a contextualized view of all their security risk data in one place, regardless of the security…

England’s National Health Service (NHS) has urged its suppliers to commit to strong cybersecurity practices amid increased cyber threats to patients and services. The voluntary cybersecurity charter aims to better protect the NHS from growing cyber threats via its supply chain, including ransomware. The open letter to current and prospective NHS suppliers noted that the ransomware threat is “endemic.” “We have experienced several significant ransomware attacks on our supply chain in recent years,” it read….

Security teams face increasingly fast-acting, and dangerous, threats. And AI is increasing the pace of cyber attacks to the point where conventional responses are no longer enough. According to researchers at Palo Alto Networks, the median time it takes an attacker to penetrate a network and access confidential data has fallen from an average of nine days in 2022, to under 24 hours in almost 45% of cases in 2024.[1] In some cases, “successful” hacks…

Each product team goes into annual planning as a “project” — because that’s the language finance still speaks. Tactically, the project is called by the capability or product name: “improve customer acquisition,” as opposed to the “integrate third-party data for personalization project.” That detail may be one opportunity on your roadmap, but it is a means to an end and subject to change. This gets you the full year’s funding in one go. No mid-year…