Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
623 articles about Vulnerabilities
Decision Insights Threat Desk • June 22, 2026
FastStone Image Viewer 8.3 has vulnerabilities in JP2 and PSD parsing that can enable code execution or crashes.
Decision Insights Research • June 22, 2026
Weekly roundup covering zero trust controls for agentic AI, CISA Secure Boot guidance, and AI infrastructure governance announcements.
Decision Insights Threat Desk • June 17, 2026
SignalRGB’s SignalIo.sys has improper access control and NULL-pointer IOCTL flaws fixed in driver version 1.3.7.0.
Decision Insights Signals • June 17, 2026
Atos joined CrowdStrike’s Project QuiltWorks to offer managed security services for sovereign AI deployments. The coalition combines Falcon platform capabilities, frontier-model risk assessment with remediation services and cyber insurance coverage, with Atos contributing governance, SOC operations, and European regulatory alignment.
Decision Insights Threat Desk • June 11, 2026
CISA guidance describes a crypton-x509-validation NameConstraints enforcement failure in Haskell TLS, tracked as CVE-2026-9648, where a sub-CA can validate certificates outside permitted SAN scopes for full session visibility. The fix is version 1.9.1.
Decision Insights Signals • June 8, 2026
Checkmarx’s 2026 Future of Application Security report finds low continuous in-IDE AppSec use and links more AI-generated code to known vulnerabilities.
Decision Insights Coverage • June 5, 2026
The June 2, 2026 Executive Order “Promoting Advanced Artificial Intelligence Innovation and Security” directs new cybersecurity actions and an AI model evaluation framework for federal agencies.
Decision Insights Threat Desk • June 3, 2026
CISA’s advisory on the Securly Chrome Extension describes version 3.0.7 vulnerabilities in data transmission, encryption, and access control that could expose filtering rules, enable configuration manipulation, and allow unauthorized data access.
Decision Insights Signals • June 2, 2026
Netskope said it joined Anthropic’s Project Glasswing, using Mythos Preview to find code vulnerabilities and share findings.
Decision Insights Coverage • June 2, 2026
Netskope says Threat Labs data shows AI apps grew fivefold, while it uses Claude Mythos Preview in Glasswing to identify and fix Netskope vulnerabilities.
Decision Insights Threat Desk • June 2, 2026
Collibra Platform Agent issues CVE-2026-10622 and CVE-2026-10621 enable unauthenticated chaining to remote code execution via crafted ZIP restore.
Decision Insights Threat Desk • June 2, 2026
Stored XSS in Appsmith’s SQL editor autocomplete can execute JavaScript in other users’ browsers, tracked as CVE-2026-7299.