CISA extends MITRE's funding period to prevent lapse in CVE program.

Maximum-severity RCE flaw affects Erlang's SSH implementation. Major banks limit information sharing following breach of Treasury Department's OCC. Apple patches two zero-days.

UK court blocks government's attempt to keep Apple encryption case secret.

President Trump strips clearances from Chris Krebs and SentinelOne employees. CISA warns of exploited CrushFTP flaw.

President Trump fires the head of NSA and Cyber Command.

Oracle Health informs customers of breach. Attackers exploit critical CrushFTP vulnerability following disclosure mix-up.

Top US officials mistakenly leaked war plans on Signal.

Mozilla patches Firefox flaw similar to actively exploited Chrome vulnerability. Kubernetes patches critical RCE flaws affecting 43% of cloud environments.

Maximum severity vulnerability can lead to server bricking.

Exploit code published for critical Apache Tomcat vulnerability. Veeam issues patch for critical flaw affecting Backup & Replication software.