The CISA has added to its KEV catalog and is giving federal agencies till Friday to patch the actively exploited, critical security (9.8) flaw reported last week in SolarWinds’ Web Help Desk software.
SolarWinds Appears To Be Back From The Dead
Recent Posts
- Disposable Code, Durable Side Effects
- Palo Alto Networks GlobalProtect Authentication Bypass: What Security Teams Should Know About CVE-2026-0257
- Anonymous PostgreSQL Injection in Drupal Core (CVE-2026-9082)
- Six Highlights from the 2026 Verizon DBIR Every Security Team Should Know
- Exploited Vulnerabilities in Cisco Catalyst SD-WAN Manager
Category Tags
- Blog
- How are collaborative AI agents (Agentic AI) reshaping offensive security?
- How can AI-driven validation drastically reduce the time between detection and remediation?
- How can you prove that a vulnerability represents a real breach risk?
- What do recent CVEs reveal about the most common mistakes in vulnerability management?
- What lessons can we learn from recent cases like the Salesforce token abuse or Fortra GoAnywhere CVEs?
- What makes Continuous Threat Exposure Management (CTEM) different from traditional penetration testing?
- What role does automation play in solving the “vulnerability overload” challenge?
- Why are API attacks still rising, and how can organizations prevent OAuth token abuse?
- Why do so many security teams prioritize irrelevant vulnerabilities while overlooking exploitable ones?