Tag: vulnerability management
685 articles

Tenable Strengthens AI Defenses Through Apex Security Acquisition
Tenable boosts AI defenses by acquiring Apex Security, enhancing protection and driving innovation in cybersecurity solutions.

Attackers are mapping your attack surface—are you?
Attackers are mapping your digital attack surface—are you prepared? Discover proven tactics to identify vulnerabilities and secure your assets against emerging threats.

251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and Elasticsearch
251 Amazon-Hosted IPs exploit scan targets vulnerabilities in ColdFusion, Struts & Elasticsearch. Protect your systems from emerging threats now.

DragonForce Ransomware Leveraged in MSP Attack Using RMM Tool
DragonForce ransomware exploits an RMM tool to launch MSP-targeted attacks, exposing new vulnerabilities in managed service provider ecosystems.

Not Every CVE Deserves a Fire Drill: Focus on What’s Exploitable
Not every CVE warrants panic—focus on exploitable vulnerabilities to streamline risk management and boost your security strategy.

Rethinking CVSS: Overcoming Its Limitations and Strengthening Security Metrics
Rethink CVSS by overcoming its limitations and strengthening security metrics to enhance risk assessments and boost threat detection capabilities.

Fortinet fixes critical zero-day exploited in FortiVoice attacks
Fortinet patches a critical zero-day in FortiVoice exploited in attacks, bolstering security and safeguarding businesses.

New European Vulnerability Database Emerges as US CVE System Falters
US CVE system falters as a new European Vulnerability Database emerges, boosting cybersecurity with fresh insights and enhanced threat analysis.

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials
Malicious npm packages compromise 3,200+ Cursor users with backdoors that steal credentials, revealing critical security vulnerabilities.

Beyond Vulnerability Management – Can You CVE What I CVE?
Explore advanced CVE strategies that transcend basic vulnerability management. Discover how “Can You CVE What I CVE?” transforms threat analysis and risk mitigation.

Exploring AI’s Role in Enhancing Secure Code Development
Explore AI’s role in secure code development: detect vulnerabilities, automate fixes, and build robust, resilient software systems.

Reinventing Digital Defense: The Critical Role of EASM in Modern Risk Protection
Reinventing Digital Defense: Harness EASM’s crucial role to shield your organization against evolving cyber risks and modern threats.

Automate CVE Response and Vulnerability Advisories Using Tines
Automate CVE response and vulnerability advisories with Tines. Boost security with reliable, efficient incident workflows and fast threat mitigation.

New Research Reveals: 95% of AppSec Fixes Don’t Reduce Risk
New research reveals 95% of AppSec fixes don’t reduce risk. Discover why most fixes fail and learn real strategies to protect your applications.

Rethinking Cloud Safety: How Intruder Uncovers Hidden Vulnerabilities
Discover how Intruder exposes hidden cloud vulnerabilities, reshaping security strategies to protect digital assets against emerging threats.

91% of organizations face vulnerability remediation delays
91% of organizations face delays in vulnerability remediation, increasing security risks. Discover strategies to speed up patch management for stronger protection.

Study Reveals a 16.7% Surge in Automated Scanning Activity
Study reveals a 16.7% surge in automated scanning activity, spotlighting escalating cyber threats and the urgent need for enhanced security measures.

Johnson Controls ICU Vulnerability Poses New Challenges for Critical Infrastructure Security
Johnson Controls ICU delivers advanced control solutions for safe, efficient building management. Experience innovation, performance, and reliability.

Q1 2025 Cybersecurity Alert: 159 CVEs Exploited with 28.3% Breached in Under 24 Hours
Q1 2025 Cybersecurity Alert: 159 CVEs exploited, 28.3% breached in under 24 hours—critical vulnerabilities driving rapid, high-risk incidents.

Marks & Spencer Takes a Direct Approach to Incident Response
Marks & Spencer adopts a proactive incident response strategy, ensuring swift action and effective management to safeguard operations and customer trust.

Socket Acquires Coana to Enhance Code Risk Accuracy
Socket acquires Coana to improve code risk accuracy, enhancing software security and reliability for developers and businesses alike.

Today’s LLMs Rapidly Generate Exploits from Patches
Discover how today’s LLMs quickly generate exploits from software patches, highlighting security vulnerabilities and the implications for cybersecurity.

Navigating Post-Mitre Management: The Future of the CVE Program
Explore the future of the CVE Program and strategies for effective post-Mitre management in cybersecurity. Stay ahead in vulnerability management.

Uncle Sam Cuts Funding for the CVE Program: Yes, That CVE
Uncle Sam slashes funding for the CVE program, raising concerns about its impact on community engagement and countering violent extremism efforts.