@steelwise.bsky.socialNearly half of confirmed-exploited flaws were over a year old at confirmation. A quarter took over three and a half years, the oldest 19.7 years. "Nothing is exploiting this yet" is a statement with a shelf life. Read the filing #vulnerabilitymanagement #patching #threatintelligence #infosec
@cveprogram.bsky.socialMinutes from the CVE Board teleconference meeting on September 2 are now available
www.mail-archive.com/cve-editoria...
#cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity
@securityonline.bsky.socialFive actively exploited software vulnerabilities threaten critical systems. Update your servers now to prevent critical remote code execution attacks.
@securityonline.bsky.socialMultiple IBM Verify Access vulnerabilities expose systems to remote attacks. Update your software now to block these critical security flaws.
#CyberSecurity #IBMSecurity #CVE #VulnerabilityManagement #InfoSec
@advisoryics.bsky.socialICS[AP] Dashboards are updated with the 3 new and 3 updated CISA Advisories released on 10/8/2026:
New:
Grid Protection Alliance
Red Lion Controls
Satel
Hitachi Energy: 1 Update
Lantronix: 1 Update
Pulsetto: 1 Update
www.icsadvisoryproject.com
#icssecurity
#otsecurity
#vulnerabilitymanagement
@advisoryics.bsky.socialICS[AP] updated CISA ICS Advisories Master File for 10/8/2026 & the following year's CSVs:
CISA_ICS_ADV_2026_10_8_26.csv
Updates on 10/8/2026 included:
CISA_ICS_ADV_2025_10_8_26.csv
Available @ ICS[AP] GitHub:
github.com/icsadvprj/IC...
@helpnetsecurity.comJava library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws
📖 Read more: www.helpnetsecurity.com/2026/10/08/l...
#cybersecurity #cybersecuritynews #opensource #Java #redhat #vulnerabilitymanagement
@secpoint.bsky.socialFortiMail security alert: actively exploited vulnerability
CVE-2026-104286
SecPoint Penetrator Contact information
www.secpoint.com/contact-me.h...
SecPoint Penetrator Partner Sign Up
www.secpoint.com/partner-sign...
#FortiMail #CyberSecurity #VulnerabilityManagement #SecPoint #Penetrator
@secpoint.bsky.socialCritical Atlassian Data Center vulnerability CVE-2026-21589
SecPoint Penetrator Contact information
www.secpoint.com/contact-me.h...
SecPoint Penetrator Partner Sign Up
www.secpoint.com/partner-sign...
#Atlassian #CyberSecurity #VulnerabilityManagement #SecPoint #Penetrator
@cveprogram.bsky.socialNew on the #CVE Blog:
“CVE Program Data Registry: Automating Federated Management”
medium.com/@cve_program...
#cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity
@basefortify.bsky.socialYour inventory says “Google Chrome”. The vulnerability ecosystem may say CPE, Affected Product or Known Affected Configuration.
BaseFortify helps connect those worlds. 🛡️
@basefortify.bsky.social🔎 A CPE identifies a product. It does not, by itself, say that the product is vulnerable.
NVD configurations add applicability, while Affected Products can provide useful vendor and version information directly from CVE records.
@secpoint.bsky.socialCitrix NetScaler security alert: two actively exploited vulnerabilities
Citrix has confirmed exploitation of CVE-2026-88771 and CVE-2026-88772 in unmitigated NetScaler deployments.
www.linkedin.com/products/sec...
#NetScaler #CyberSecurity #VulnerabilityManagement #SecPoint #Penetrator
@helpnetsecurity.comAutomation, AI agents or people? Sorting out who handles each security finding
📖 Read more: www.helpnetsecurity.com/2026/10/07/s...
#cybersecurity #cybersecuritynews #infosec #appsec #vulnerabilitymanagement #AIsecurity
@infralovers.bsky.socialKlassische Scanner finden Schwachstellen und melden sie. Das Beheben bleibt bei Ihnen.
Alle Neuerungen im Überblick:
buff.ly/nutZ6a2
@advisoryics.bsky.socialICS[AP] Dashboards are updated with the 6 CISA Advisories released on 10/6/2026:
Hitachi Energy: 4 New
Johnson Controls Inc.: 1 New
Savannah: 1 New
[www.icsadvisoryproject.com](www.icsadvisoryproject.com)
#icssecurity
#otsecurity
#vulnerabilitymanagement
@advisoryics.bsky.socialICS[AP] updated CISA ICS Advisories Master File for 10/6/2026 & the following year's CSVs:
CISA_ICS_ADV_2026_10_6_26.csv
Available @ ICS[AP] GitHub:
github.com/icsadvprj/IC...
@bsquaredintel.bsky.socialThis also means that you have a process in place for patching anything a scan uncovers therefore bolstering your protection.
#NationalCybersecurityAwarenessMonth #VulnerabilityManagement #InfoSec #Compliance #BsquaredIntel
@psoheil.bsky.social🚨 Critical TeamCity vulnerability now being exploited by ransomware groups. CVE-2026-63077 CVSS score of 9.8.
#Cybersecurity #Ransomware #DevSecOps #TeamCity #JetBrains #CICD #SupplyChainSecurity #VulnerabilityManagement #SoftwareSecurity #CloudSecurity
@inferlume.bsky.socialCritical zero-days hit Citrix NetScaler, Cisco SD-WAN, & FortiMail boundary gateways as unauthenticated actors seize administrative control while Cl0p strikes Oracle EBS instances in mass extortion
#ThreatIntel #CyberSecurity #InfoSec #VulnerabilityManagement #ZeroDay