Latest MITRE news

Dev rejects CVE severity, makes his GitHub repo read-only

The popular open source project, 'ip' had its GitHub repository archived, or made "read-only" by its developer as a result of a dubious CVE report filed for his project. Unfortunately, open-source developers have recently been met with an uptick in debatable or outright bogus CVEs filed for their projects.
- Ax Sharma
- June 30, 2024
- 10:31 AM
- 2
MITRE says state hackers breached its network via Ivanti zero-days

The MITRE Corporation says a state-backed hacking group breached its systems in January 2024 by chaining two Ivanti VPN zero-days.
- Sergiu Gatlan
- April 19, 2024
- 03:02 PM
- 4
MITRE releases new list of top 25 most dangerous software bugs

MITRE shared today this year's list of the top 25 most dangerous weaknesses plaguing software during the previous two years.
- Sergiu Gatlan
- June 29, 2023
- 12:28 PM
- 0
CISA releases free ‘Decider’ tool to help with MITRE ATT&CK mapping

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has released 'Decider,' an open-source tool that helps defenders and security analysts quickly generate MITRE ATT&CK mapping reports.
- Bill Toulas
- March 02, 2023
- 09:10 AM
- 0
Security advisory accidentally exposes vulnerable systems

A security advisory for a vulnerability (CVE) published by MITRE has accidentally been exposing links to remote admin consoles of over a dozen vulnerable IP devices since at least April 2022.
- Ax Sharma
- July 06, 2022
- 03:20 PM
- 0
MITRE shares this year's list of most dangerous software bugs

MITRE shared this year's top 25 most common and dangerous weaknesses impacting software throughout the previous two calendar years.
- Sergiu Gatlan
- June 28, 2022
- 12:29 PM
- 1
MITRE shares list of most dangerous hardware weaknesses

MITRE shared a list of the topmost dangerous programming, design, and architecture security flaws plaguing hardware this year.
- Sergiu Gatlan
- November 02, 2021
- 08:27 AM
- 0
MITRE updates list of top 25 most dangerous software bugs

MITRE has shared this year's top 25 list of most common and dangerous weaknesses plaguing software throughout the previous two years.
- Sergiu Gatlan
- July 22, 2021
- 09:35 AM
- 1
Undisclosed Apache Velocity XSS vulnerability impacts GOV sites

An undisclosed XSS vulnerability in Apache Velocity Tools can be exploited by unauthenticated attackers to target government sites, including NASA and NOAA.
- Ax Sharma
- January 15, 2021
- 05:05 AM
- 0
MITRE shares this year's top 25 most dangerous software bugs

MITRE today shared a list of the top 25 most common and dangerous weaknesses plaguing software during the last two previous years.
- Sergiu Gatlan
- August 20, 2020
- 11:33 AM
- 0
US Government Takes Steps to Bolster CVE Program

The US government is taking steps to fix the Common Vulnerabilities and Exposures (CVE) system that's been plagued by various problems in recent years.
- Catalin Cimpanu
- August 28, 2018
- 09:18 AM
- 1