CVE-2025-54253: Critical Zero-Day Vulnerability in Adobe Experience Manager Forms

A newly discovered zero-day vulnerability, tracked as CVE-2025-54253, affects Adobe Experience Manager (AEM) Forms on JEE versions 6.5.23.0 and earlier. Adobe has responded by issuing an urgent security update to prevent exploitation. Rated critical with a CVSS score of 10.0, this vulnerability can allow attackers to bypass authentication and execute arbitrary code remotely without requiring any user interaction.

LevelBlue Acquires Trustwave, Ushering in a New Era as the World's Largest, Pure-Play MSSP

Today marks an exciting day for LevelBlue and for the broader cybersecurity industry. I’m pleased to announce that LevelBlue has completed its acquisition of Trustwave, a global leader in cybersecurity and managed detection and response (MDR). This is more than a business transaction; it’s a strategic leap forward in our mission to redefine what it means to be a trusted cybersecurity partner in an increasingly complex, high-stakes world.

Ep 6: Security haven or horror story: from SIEMs to lakes to lakehouses

Between SIEMs, data lakes, and data lakehouses, the buzzwords alone could fill a glossary. In this episode, Adam and David break down the real differences between data lakes and SIEM systems and why effectively managing all that data is crucial for staying visible and secure. They also dive into how AI is shaking up the game and why picking the right tools can mean the difference between being overwhelmed and being in control.

The Next Chapter in Stopping Threats Before They Breach Your Network

You’ll notice things look different. Because the world you’re defending has changed—and so have the stakes. Every breach proves the same thing: the tools you’ve been given aren’t enough. Firewalls let attacks through. “Next-gen detection” leaves you drowning in alerts after the fact. Threat intelligence is treated like a forensic tool, not a preventative defense.

Sensitive Data Leaks: What You Don't Know Can Hurt You #dataleak #sensitivedata #dataprotection

Sensitive data isn’t always obvious attackers can find and exploit information you never realized was exposed via your APIs. In this clip, Wallarm and Oracle experts explain how insurance policies, business documents, or hidden fields can become valuable targets. Learn why broad data discovery and smarter controls are critical to protect your APIs from unexpected leaks.

Inside the SonicWall SSLVPN Attacks

Inside the SonicWall SSLVPN Attacks In this week’s episode of The 443, Marc Laliberte and Corey Nachreiner break down: The recent SonicWall SSLVPN exploits What we know so far and how attackers are getting in The risks for organizations relying on vulnerable VPN gateways Plus: a WinRAR zero-day and a new ChatGPT vulnerability you should know about.

Shift Left AI Security #coding #cybersecurity

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Make Your Security Stack Cloud-Flexible with LimaCharlie - Now on Google Cloud Marketplace

Built with security engineers in mind, LimaCharlie's API-first platform delivers on the promise of cloud-like flexibility for your security operations. Learn in the video how to obtain unified, granular visibility across your entire security landscape (multi-cloud, on-prem, endpoints) with day-one value.