Tag · 105 Articles
Page 1 of 11
vulnerability management
FortiMail zero-day CVE-2026-104286 lets one unauthenticated request write any file via the IBE handler. CISA KEV listed. Fixed builds, IoCs and what to check.
Read Article →
vulnerability management
Email gateway SQL injection CVE-2026-76461 hits Cisco Secure Email Gateway: CVSS 9.8, CISA KEV listed, no workaround. See fixed releases and checks.
Read Article →
vulnerability management
AI gateway exploitation hits LiteLLM, RAGFlow and Kestra, with provider key theft and cryptominers. See the CVEs, CISA KEV status, fixes and IOCs.
Read Article →
vulnerability management
CRA reporting obligations have applied since 11 September 2026: 24h early warning, 72h notification, final report. Dates, platform, who must report.
Read Article →
vulnerability management
CISA KEV added 272 entries in 2026 by 23 October. See which flaws mattered and the four filters that replace volume-based triage.
Read Article →
vulnerability management
Our H1 2026 analysis found that 32.1% of exploited vulnerabilities were attacked before a fix even existed. Patch velocity cannot close that window. See who should own it, and which controls actually work when there is…
Read Article →
vulnerability management
Shadow AI explained: how unmanaged agents like Clawdbot, Moltbot and OpenClaw hold API keys behind unhardened gateways, with attack scenarios and fixes.
Read Article →
vulnerability management
Learn how energy organizations can strengthen cybersecurity with EASM best practices against APTs, ransomware, and AI-powered threats.
Read Article →
vulnerability management
Discover 2026 EASM challenges and innovations shaping cyber defense against APTs, AI threats, and supply chain attacks.
Read Article →
vulnerability management
Learn how real-time phishing protection works: domain monitoring, early detection and automated takedown of fake sites that imitate your brand.
Read Article →Brandefense
