Vulnerability management

8 articles

InsightsTechnology, Cloud & SaaSBreaking
OpenAI positions Daybreak as a governed loop for AI-assisted cyber defense
OpenAI says Daybreak combines models, Codex Security and human oversight into a governed loop for inventory, validation, remediation and proof.
Priya Raman12 Sep 2026, 19:00 IST6 min read
InsightsGovernment & Defence
CISA BOD 26-04 ends CVSS-ordered patching: the four questions that replace it
CISA's Binding Operational Directive 26-04 drops CVSS from federal patch prioritisation, replacing it with four yes/no questions and a sixteen-row deadline table.
Priya Raman11 Sep 2026, 13:45 IST7 min read
ThreatsIndustrial, OT & IoTBreaking
SonicWall SMA1000 Zero-Day Chain Hit CISA KEV in Three Days. Patching Is the Easy Part
SonicWall disclosed two actively exploited SMA1000 flaws on 1 September; CISA set a 5 September federal deadline. The harder problem is proving an appliance you cannot instrument is clean.
Daniel Okafor11 Sep 2026, 12:10 IST5 min read
NewsGovernment & DefenceHigh
A CVSS 10.0 ERP Flaw Your Scanner Will Never Report: The CERT-In Blind Spot
CERT-In scored an unauthenticated RCE in Manacle ERP at CVSS 10.0. The CVE is in NVD, but with no CPE data your scanner cannot match it. Here is how to fix that.
CST Newsroom11 Sep 2026, 10:00 IST6 min read
ThreatsTechnology, Cloud & SaaSCritical
FortiClient EMS CVE-2026-35616: the hotfix window was not the dangerous part
Fortinet's emergency hotfix for CVE-2026-35616 blocked the attack path without fixing the flaw, and the complete patch that followed needed its own re-release.
Priya Raman10 Sep 2026, 21:50 IST6 min read
ThreatsTechnology, Cloud & SaaSHigh
LiteLLM and Kestra in KEV: exploited AI tooling is now a vulnerability management problem
CISA added 15 CVEs to the KEV catalog in six working days, including exploited flaws in LiteLLM and Kestra — AI tooling that most asset inventories never see.
Daniel Okafor10 Sep 2026, 20:30 IST6 min read
InsightsTechnology, Cloud & SaaSHigh
SharePoint 2016/2019 is unpatchable now. Exchange has until 31 October.
SharePoint Server 2016 and 2019 lost support on 14 July 2026 with no paid ESU on offer. Exchange 2016/2019 has until 31 October. Here is how to contain both.
Priya Raman10 Sep 2026, 15:00 IST6 min read
GuidesTechnology, Cloud & SaaS
Playbook: surviving a 900-CVE Patch Tuesday without breaking your change process
A repeatable triage model for very large monthly releases — what to expedite, what to schedule, and how to prove coverage afterwards.
Priya Raman10 Sep 2026, 01:30 IST8 min read