Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
636 articles about Vulnerabilities
Decision Insights Coverage • June 11, 2025
DSEI Japan 2025 outlined five cybersecurity themes that reflect the shift in military operations towards digital capabilities.
Decision Insights Threat Desk • June 9, 2025
CISA adds two new vulnerabilities linked to active exploitation to its Known Exploited Vulnerabilities Catalog.
Decision Insights Research • June 5, 2025
Independent testing is essential for validating SASE solutions amid vendor claims, ensuring reliable cyber security assessments.
Decision Insights Threat Desk • June 2, 2025
BOD 22-01 requires federal agencies to promptly address new vulnerabilities to improve cybersecurity posture.
Decision Insights Research • May 26, 2025
Weekly roundup covering enterprise DevOps governance, cloud data services, container supply-chain security, and cybersecurity advisories.
Decision Insights Threat Desk • May 23, 2025
Binding Operational Directive 22-01 mandates response to catalog vulnerabilities for federal agencies, advised for all organizations.
Decision Insights Research • May 19, 2025
Weekly roundup covering KEV vulnerability additions, observability pricing and telemetry updates, cloud security models, and AI and connectivity deployments for enterprises and infrastructure teams.
Decision Insights Threat Desk • May 14, 2025
CISA adds CVE-2025-32756, a Fortinet vulnerability, to its Known Exploited Vulnerabilities Catalog, citing active exploitation.
Decision Insights Threat Desk • May 13, 2025
CISA added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, reflecting ongoing exploitation risks.
Decision Insights Research • May 12, 2025
Weekly roundup covering AI-enabled observability and threat detection, cloud and edge security, networking infrastructure updates, and major partner releases across enterprises.
Decision Insights Threat Desk • May 6, 2025
CISA added CVE-2025-34028 and CVE-2024-58136 to the Known Exploited Vulnerabilities Catalog due to active exploitation evidence.
Decision Insights Threat Desk • May 6, 2025
CISA added CVE-2025-3248, a Langflow vulnerability, to its Known Exploited Vulnerabilities Catalog after detecting active exploitation.