Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Ivanti’s Endpoint Manager Mobile (EPMM, formerly MobileIron Core) just delivered an unpleasant one-two punch to defenders. Two fresh vulnerabilities—an authentication bypass (CVE-2025-4427) and an API-level remote-code-execution flaw (CVE-2025-4428)—can be chained to grant unauthenticated attackers full command execution on affected servers. Both issues are already being exploited in the wild, making rapid remediation essential. In this article.

The Internet of Things (IoT) has fundamentally transformed how devices connect and communicate across networks, but this connectivity brings unprecedented security challenges. At the heart of securing IoT ecosystems lies device certificate management – a critical component that ensures authentic device identity and secure communications through Public Key Infrastructure (PKI).

In the fast-paced world of modern business, security processes have become a cornerstone of an organization’s risk management strategy. As companies navigate increasingly complex threat landscapes, the pressure mounts to enhance security while keeping pace with business innovation. Integrating artificial intelligence (AI) into security review workflows is emerging as a practical solution to reducing review times, lowering costs, and improving system reliability.

Dependency management is one of the biggest challenges in modern software development. Large projects often rely on dozens or even hundreds of libraries. Each one can introduce new vulnerabilities or even malicious code. Attackers sometimes upload fake packages to popular open-source repositories, hoping that build systems will download these packages automatically. This problem is made worse by transitive dependencies, where a single library might include several other libraries under the hood.

Implementing a business continuity plan is essential for reducing operational downtime, which subsequently minimises financial losses and maximises efficiency. Companies that invest in such planning gain a significant competitive edge, as readiness can spell the difference between survival and collapse during unforeseen challenges. Additionally, protecting your supply chain is a critical element, directly impacting customer satisfaction and long-term success.

Continuous Threat Exposure Management (CTEM) is gaining increasing recognition as a crucial component for mature cybersecurity programmes. Both Gartner and Forrester have highlighted CTEM as “a strategic imperative,” underscoring its importance in addressing modern cyber risks. This recognition is well founded, as demonstrated by recent cyberattacks on major organisations including Marks & Spencer, Co-op, Harrods, the NHS and American healthcare institutions.