vulnerability management

OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes

agentic AI, AI, cybersecurity, News, OpenAI, penetration testing, vulnerability management /

OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes 2026-11-13 at 11:31 By Anamarija Pogorelec OpenAI is bringing AI agents into more of the software security process with Daybreak, pairing web application penetration testing with tools that investigate vulnerabilities and develop fixes. The two offerings, Red Team and Defense Factory, connect the work […]

OpenAI’s Daybreak brings AI agents to security testing and vulnerability fixes Read More »

Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed

CISO, cybersecurity, enterprise, News, ProjectDiscovery, report, Risk Management, strategy, survey, tips, vulnerability management /

Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed 2026-11-11 at 07:30 By Mirko Zorz Nearly half of security teams at organizations with 5,000 or more employees close or deprioritize vulnerability findings without fully verifying them, ProjectDiscovery found, and the reason they give is time. Here’s the catch. Among teams that […]

Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed Read More »

OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run

AI, Linux, News, OpenAI, vulnerability management /

OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run 2026-11-05 at 11:05 By Sinisa Markovic An automated system running on an upcoming AI model turned hundreds of Linux kernel bugs into working exploits that give an ordinary user root access, and wrote a patch for each underlying flaw, OpenAI revealed […]

OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run Read More »

Secure your containers without breaking what works

automation, containers, cybersecurity, DevSecOps, Don't miss, Expert analysis, Hot stuff, News, opinion, vulnerability management /

Secure your containers without breaking what works 2026-11-04 at 08:35 By Help Net Security Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much harder. A standard container image may include operating-system packages, development tools, debugging utilities and libraries that an application never uses. Each unnecessary component […]

Secure your containers without breaking what works Read More »

Novee puts forgotten internet-facing assets through penetration testing

AI, asset discovery, Don't miss, Hot stuff, News, Novee, penetration testing, security testing, vulnerability management /

Novee puts forgotten internet-facing assets through penetration testing 2026-11-03 at 16:00 By Help Net Security Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable vulnerabilities. It tests newly disclosed CVEs and findings imported from third-party external attack surface management (EASM) […]

Novee puts forgotten internet-facing assets through penetration testing Read More »

Qualys CISO on what security teams can do as exploit campaigns grow

automation, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, patching, Qualys, strategy, tips, vulnerability management /

Qualys CISO on what security teams can do as exploit campaigns grow 2026-10-29 at 08:30 By Mirko Zorz In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains why CISOs should track the average window of exposure instead of […]

Qualys CISO on what security teams can do as exploit campaigns grow Read More »

Claude Security can now spot vulnerabilities that reappear in code

agentic AI, AI, Anthropic, cybersecurity, monitoring, News, scanning, threat modeling, vulnerability management /

Claude Security can now spot vulnerabilities that reappear in code 2026-10-22 at 14:02 By Anamarija Pogorelec Anthropic has updated Claude Security with ongoing code scanning and automatic fix tracking to help security teams monitor vulnerabilities as software changes. The service scans codebases for vulnerabilities and suggests patches for review. It is powered by the company’s […]

Claude Security can now spot vulnerabilities that reappear in code Read More »

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers

Cisco, cybersecurity, Don't miss, Fortinet, Hot stuff, News, Palo Alto Networks, patch, PHP, security update, VulnCheck, vulnerability, vulnerability management /

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers 2026-10-22 at 13:22 By Mirko Zorz Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by PHP2Shell, a pair of critical PHP vulnerabilities that let an attacker run code on a web server without logging in. Palo Alto has […]

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers Read More »

DevGuard: Open-source vulnerability management for the software supply chain

cybersecurity, DevOps, Don't miss, GitHub, Hot stuff, News, open source, software, supply chain, vulnerability management /

DevGuard: Open-source vulnerability management for the software supply chain 2026-10-21 at 10:02 By Anamarija Pogorelec DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One command line, six […]

DevGuard: Open-source vulnerability management for the software supply chain Read More »

Incomplete security patches show hackers where to look next

News, Terra Security, vulnerability, vulnerability management /

Incomplete security patches show hackers where to look next 2026-10-20 at 17:13 By Sinisa Markovic Security patches are turning into roadmaps for attackers, with a growing share of fixes later found incomplete or open to bypass. Oren Yomtov, a security researcher at Terra Security, began tracking broken fixes after the team kept running into them […]

Incomplete security patches show hackers where to look next Read More »

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws

vulnerability, vulnerability management /

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws 2026-10-14 at 17:05 By Ashish Khaitan This Cyble Research & Intelligence Labs (CRIL) weekly vulnerability report covers two views of risk: what attackers tried against Cyble’s global honeypot sensors, and what the Cybersecurity and Infrastructure Security Agency (CISA) disclosed for industrial control systems (ICS). […]

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws Read More »

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws

enterprise, IBM, Java, News, open source, Red Hat, vulnerability assessment, vulnerability management /

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws 2026-10-08 at 07:18 By Anamarija Pogorelec IBM and Red Hat have found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries through Lightwell, their program for patching open source code that companies already run in production. Companies running the […]

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws Read More »

Automation, AI agents or people? Sorting out who handles each security finding

ArmorCode, automation, boardroom, cybersecurity, Don't miss, Features, Hot stuff, News, report, strategy, survey, tips, vulnerability management /

Automation, AI agents or people? Sorting out who handles each security finding 2026-10-07 at 07:30 By Mirko Zorz Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software security programs if they keep working the way they do today. The respondents are […]

Automation, AI agents or people? Sorting out who handles each security finding Read More »

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot

CISA, Government, Risk Management, Vulnerabilities, vulnerability, vulnerability management /

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot 2026-09-17 at 17:28 By Eduard Kovacs The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk. The post CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot Read More »

What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree

CISO, Cohesity, CVSS, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, patching, SMBs, strategy, tips, vulnerability management /

What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree 2026-08-31 at 09:00 By Mirko Zorz In this Help Net Security interview, Dr. Joye Purser, Global Field CISO at Cohesity, explains how to rank vulnerabilities when KEV, EPSS, and CVSS point in different directions. Active exploitation comes first, then exploit likelihood, then technical severity, […]

What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree Read More »

Google’s AI security agents found 100+ critical software vulnerabilities in just two days

AI, Google, Mandiant, News, vulnerability management /

Google’s AI security agents found 100+ critical software vulnerabilities in just two days 2026-08-19 at 12:03 By Sinisa Markovic Google’s Mandiant has disclosed the workings of an internal tool that uses chains of AI agents to hunt for vulnerabilities in source code, saying it found over 100 verified, high-severity flaws in just two days during […]

Google’s AI security agents found 100+ critical software vulnerabilities in just two days Read More »

AI takes on a bigger role in finding Chrome vulnerabilities

AI, Chrome, cybersecurity, Google, News, vulnerability management /

AI takes on a bigger role in finding Chrome vulnerabilities 2026-07-30 at 20:01 By Sinisa Markovic Google has expanded the use of AI in Chrome’s security workflow, using it to find vulnerabilities, triage bug reports, generate patches, and review code to shorten the time between discovering software flaws and delivering security updates. “Historically, triaging a […]

AI takes on a bigger role in finding Chrome vulnerabilities Read More »

Cantina Emerges From Stealth With $8 Million in Funding

Cantina, Cybersecurity Funding, emerge from stealth, funding, vulnerability management /

Cantina Emerges From Stealth With $8 Million in Funding 2026-07-30 at 16:00 By Ionut Arghire The startup’s community-powered agentic security platform helps proactively identify, prioritize, and remediate vulnerabilities. The post Cantina Emerges From Stealth With $8 Million in Funding appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cantina Emerges From Stealth With $8 Million in Funding Read More »

200 new CVEs a day and no realistic way to patch them all

CISA, cybersecurity, Don't miss, Features, Hot stuff, KEVIntel, News, opinion, patching, vulnerability assessment, vulnerability management /

200 new CVEs a day and no realistic way to patch them all 2026-07-30 at 09:00 By Mirko Zorz Ryan Dewhurst, CEO at KEVIntel, explains how his team confirms exploitation that CISA’s catalog has not listed yet. He describes a global honeypot sensor network, AI triage, and human verification in a lab before a vulnerability […]

200 new CVEs a day and no realistic way to patch them all Read More »

Google gives developers an AI bug hunter that also writes patches

AI, code, cybersecurity, Google, News, vulnerability management /

Google gives developers an AI bug hunter that also writes patches 2026-07-24 at 11:53 By Sinisa Markovic Google has launched a preview of CodeMender, an AI agent built to scan code for security flaws, confirm they are exploitable, and generate fixes for developers to review. (Source: Google) The company describes it as a response to […]

Google gives developers an AI bug hunter that also writes patches Read More »

Scroll to Top