Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
May 27, 2026
Proofpoint announced Active Exploits Protection, a solution that uses Proofpoint telemetry to identify vulnerabilities actively exploited in the wild and translate that intelligence into rapid, automated protections across primary attack paths. The company cites time-to-protection metrics, detection precision, SOC integration, and API access, and states global availability.
May 21, 2026
Rapid7 Q1 2026 Threat Landscape Report: vulnerability exploitation (38%) leads MDR cases, with half of exploited CVEs zero-click.
May 20, 2026
Dirty Frag affects Linux kernel 4.10+ by chaining xfrm-ESP and RxRPC page-cache flaws, enabling privilege escalation.
May 18, 2026
SGLang has two unauthenticated RCE issues and one unauthenticated path traversal tied to specific configs and endpoints.
May 13, 2026
JupiterOne launched AI Attack Surface Management (AI ASM) and Unified Vulnerability Management (UVM) to provide relationship-aware asset and vulnerability context.