vulnerability management

Claude Security can now spot vulnerabilities that reappear in code

agentic AI, AI, Anthropic, cybersecurity, monitoring, News, scanning, threat modeling, vulnerability management /

Claude Security can now spot vulnerabilities that reappear in code 2026-10-22 at 14:02 By Anamarija Pogorelec Anthropic has updated Claude Security with ongoing code scanning and automatic fix tracking to help security teams monitor vulnerabilities as software changes. The service scans codebases for vulnerabilities and suggests patches for review. It is powered by the company’s […]

Claude Security can now spot vulnerabilities that reappear in code Read More »

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers

Cisco, cybersecurity, Don't miss, Fortinet, Hot stuff, News, Palo Alto Networks, patch, PHP, security update, VulnCheck, vulnerability, vulnerability management /

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers 2026-10-22 at 13:22 By Mirko Zorz Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by PHP2Shell, a pair of critical PHP vulnerabilities that let an attacker run code on a web server without logging in. Palo Alto has […]

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers Read More »

DevGuard: Open-source vulnerability management for the software supply chain

cybersecurity, DevOps, Don't miss, GitHub, Hot stuff, News, open source, software, supply chain, vulnerability management /

DevGuard: Open-source vulnerability management for the software supply chain 2026-10-21 at 10:02 By Anamarija Pogorelec DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One command line, six […]

DevGuard: Open-source vulnerability management for the software supply chain Read More »

Incomplete security patches show hackers where to look next

News, Terra Security, vulnerability, vulnerability management /

Incomplete security patches show hackers where to look next 2026-10-20 at 17:13 By Sinisa Markovic Security patches are turning into roadmaps for attackers, with a growing share of fixes later found incomplete or open to bypass. Oren Yomtov, a security researcher at Terra Security, began tracking broken fixes after the team kept running into them […]

Incomplete security patches show hackers where to look next Read More »

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws

vulnerability, vulnerability management /

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws 2026-10-14 at 17:05 By Ashish Khaitan This Cyble Research & Intelligence Labs (CRIL) weekly vulnerability report covers two views of risk: what attackers tried against Cyble’s global honeypot sensors, and what the Cybersecurity and Infrastructure Security Agency (CISA) disclosed for industrial control systems (ICS). […]

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws Read More »

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws

enterprise, IBM, Java, News, open source, Red Hat, vulnerability assessment, vulnerability management /

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws 2026-10-08 at 07:18 By Anamarija Pogorelec IBM and Red Hat have found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries through Lightwell, their program for patching open source code that companies already run in production. Companies running the […]

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws Read More »

Automation, AI agents or people? Sorting out who handles each security finding

ArmorCode, automation, boardroom, cybersecurity, Don't miss, Features, Hot stuff, News, report, strategy, survey, tips, vulnerability management /

Automation, AI agents or people? Sorting out who handles each security finding 2026-10-07 at 07:30 By Mirko Zorz Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software security programs if they keep working the way they do today. The respondents are […]

Automation, AI agents or people? Sorting out who handles each security finding Read More »

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot

CISA, Government, Risk Management, Vulnerabilities, vulnerability, vulnerability management /

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot 2026-09-17 at 17:28 By Eduard Kovacs The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk. The post CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot Read More »

What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree

CISO, Cohesity, CVSS, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, patching, SMBs, strategy, tips, vulnerability management /

What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree 2026-08-31 at 09:00 By Mirko Zorz In this Help Net Security interview, Dr. Joye Purser, Global Field CISO at Cohesity, explains how to rank vulnerabilities when KEV, EPSS, and CVSS point in different directions. Active exploitation comes first, then exploit likelihood, then technical severity, […]

What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree Read More »

Google’s AI security agents found 100+ critical software vulnerabilities in just two days

AI, Google, Mandiant, News, vulnerability management /

Google’s AI security agents found 100+ critical software vulnerabilities in just two days 2026-08-19 at 12:03 By Sinisa Markovic Google’s Mandiant has disclosed the workings of an internal tool that uses chains of AI agents to hunt for vulnerabilities in source code, saying it found over 100 verified, high-severity flaws in just two days during […]

Google’s AI security agents found 100+ critical software vulnerabilities in just two days Read More »

AI takes on a bigger role in finding Chrome vulnerabilities

AI, Chrome, cybersecurity, Google, News, vulnerability management /

AI takes on a bigger role in finding Chrome vulnerabilities 2026-07-30 at 20:01 By Sinisa Markovic Google has expanded the use of AI in Chrome’s security workflow, using it to find vulnerabilities, triage bug reports, generate patches, and review code to shorten the time between discovering software flaws and delivering security updates. “Historically, triaging a […]

AI takes on a bigger role in finding Chrome vulnerabilities Read More »

Cantina Emerges From Stealth With $8 Million in Funding

Cantina, Cybersecurity Funding, emerge from stealth, funding, vulnerability management /

Cantina Emerges From Stealth With $8 Million in Funding 2026-07-30 at 16:00 By Ionut Arghire The startup’s community-powered agentic security platform helps proactively identify, prioritize, and remediate vulnerabilities. The post Cantina Emerges From Stealth With $8 Million in Funding appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cantina Emerges From Stealth With $8 Million in Funding Read More »

200 new CVEs a day and no realistic way to patch them all

CISA, cybersecurity, Don't miss, Features, Hot stuff, KEVIntel, News, opinion, patching, vulnerability assessment, vulnerability management /

200 new CVEs a day and no realistic way to patch them all 2026-07-30 at 09:00 By Mirko Zorz Ryan Dewhurst, CEO at KEVIntel, explains how his team confirms exploitation that CISA’s catalog has not listed yet. He describes a global honeypot sensor network, AI triage, and human verification in a lab before a vulnerability […]

200 new CVEs a day and no realistic way to patch them all Read More »

Google gives developers an AI bug hunter that also writes patches

AI, code, cybersecurity, Google, News, vulnerability management /

Google gives developers an AI bug hunter that also writes patches 2026-07-24 at 11:53 By Sinisa Markovic Google has launched a preview of CodeMender, an AI agent built to scan code for security flaws, confirm they are exploitable, and generate fixes for developers to review. (Source: Google) The company describes it as a response to […]

Google gives developers an AI bug hunter that also writes patches Read More »

Multi-patch vulnerability fixes can leave open source exposed

CVE, Don't miss, Features, Hot stuff, News, open source, patching, research, strategy, tips, vulnerability management /

Multi-patch vulnerability fixes can leave open source exposed 2026-07-23 at 08:00 By Mirko Zorz Vulnerability management runs on a shorthand. A CVE shows a linked patch, someone applies it, and the ticket moves to closed. That shorthand covers most open source fixes. A share work in a different way, arriving as a run of two […]

Multi-patch vulnerability fixes can leave open source exposed Read More »

Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522)

Censys, Defused, Don't miss, Hot stuff, News, PoC, SharePoint, vulnerability, vulnerability management, WatchTowr /

Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522) 2026-07-22 at 14:47 By Zeljka Zorz Attackers are exploiting a critical SharePoint remote code execution (RCE) vulnerability (CVE-2026-50522) to extract the servers’ IIS machine keys. “WatchTowr is observing active exploitation of CVE-2026-50522 against on-premise Microsoft SharePoint deployments following the release of public exploit code, […]

Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522) Read More »

Companies keep getting breached by vulnerabilities they already knew about

CISO, cybersecurity, Don't miss, News, report, Vicarius, vulnerability management /

Companies keep getting breached by vulnerabilities they already knew about 2026-07-16 at 07:30 By Mirko Zorz Scanning tools have gotten good at their work. Organizations now find more weaknesses across more of their systems than at any earlier point in the industry’s history. A survey from the security firm Vicarius points to a gap that […]

Companies keep getting breached by vulnerabilities they already knew about Read More »

White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative

AI, Artificial Intelligence, critical infrastructure, Featured, Gold Eagle, Government, Government Policy, vulnerability management, White House /

White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative 2026-07-15 at 13:18 By Eduard Kovacs The new program stems from an AI-focused Executive Order signed by President Trump on June 2. The post White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative Read More »

Vulnerability reports are arriving faster than GitHub can review them

CVE, DevOps, Don't miss, GitHub, News, vulnerability assessment, vulnerability management /

Vulnerability reports are arriving faster than GitHub can review them 2026-06-30 at 08:25 By Anamarija Pogorelec Across the open source world, people are reporting software flaws in record numbers, and the systems built to verify those reports are straining under the weight. The GitHub Advisory Database, which feeds automated security alerts to millions of projects, […]

Vulnerability reports are arriving faster than GitHub can review them Read More »

AWS Continuum brings AI models to code vulnerability management

AI, AWS, News, vulnerability management /

AWS Continuum brings AI models to code vulnerability management 2026-06-18 at 07:33 By Sinisa Markovic AWS Continuum for code vulnerabilities, a system built to handle a vulnerability across its lifecycle, from discovery through to a fix, is now available in gated preview. It reasons over a customer’s environment, confirms which findings are real, and works […]

AWS Continuum brings AI models to code vulnerability management Read More »

Scroll to Top