Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
623 articles about Vulnerabilities
Decision Insights Threat Desk • January 9, 2026
BeeS patched an SQL injection in its BET portal and applied automatic updates; clients do not need to take action.
Decision Insights Threat Desk • January 6, 2026
CVE-2025-14026: Forcepoint One DLP Client's bundled Python runtime can be modified to enable arbitrary code execution.
Decision Insights Signals • January 6, 2026
ActiveState released a 2026 vulnerability report finding widespread container use but frequent breaches and audit failures.
Decision Insights Signals • December 18, 2025
Apiiro introduced AI-SAST in public preview, combining AST scanning, LLM reasoning and Deep Code Analysis to detect and fix vulnerabilities.
Decision Insights Signals • December 17, 2025
Black Duck's report from a 540-respondent survey found 95% used AI tools while 24% applied full IP, license, security and quality checks to AI-generated code.
Decision Insights Threat Desk • December 16, 2025
Siemens Gridscale X Prepay has username-enumeration and account-lock bypass flaws that can allow continued access after lock.
Decision Insights Research • December 15, 2025
Weekly roundup covering liquid-cooled AI systems, programmable switching, agentic tooling, and multi-year IT services agreements.
Decision Insights Research • December 15, 2025
Weekly roundup covering MCP for Copilot, data integration recognition, agentic AI governance, security guidance, and network and market updates.
Decision Insights Threat Desk • December 11, 2025
CISA issued 12 ICS advisories covering products from Johnson Controls, Siemens, AzeoTech, OpenPLC_V3, GDCM, and Varex Imaging.
Decision Insights Threat Desk • December 11, 2025
CISA added CVE-2025-58360, an OSGeo GeoServer XML external entity vulnerability, to the Known Exploited Vulnerabilities Catalog.
Decision Insights Signals • December 11, 2025
Netcraft published five predictions for 2026 covering AI vulnerabilities, Phishing-as-a-Service, attack-surface management, seasonal scams, and targets.
Decision Insights Threat Desk • December 9, 2025
CISA added CVE-2025-6218 and CVE-2025-62221 to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation.