Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
623 articles about Vulnerabilities
Decision Insights Threat Desk • June 2, 2026
CISA’s update on CVE-2026-10629 says Verizon IMS SIP signaling for VoLTE omits IPsec ESP integrity, leaving REGISTER, INVITE, MESSAGE, BYE, and UPDATE traffic unprotected. The advisory cites expected 3GPP TS 33.203 and GSMA IR.92 behavior and notes Verizon’s “currently available” integrity support statement for later rollout.
Decision Insights Threat Desk • May 28, 2026
Casdoor versions 2.362.0 and earlier face multiple SAML and token exchange flaws enabling authentication bypass and privilege escalation.
Decision Insights Research • May 27, 2026
Weekly roundup covering exploit telemetry automation, AI governance integrations, telco network modernization, and microsegmentation forecasts.
Decision Insights Signals • May 27, 2026
Proofpoint announced Active Exploits Protection, a solution that uses Proofpoint telemetry to identify vulnerabilities actively exploited in the wild and translate that intelligence into rapid, automated protections across primary attack paths. The company cites time-to-protection metrics, detection precision, SOC integration, and API access, and states global availability.
Decision Insights Signals • May 21, 2026
Rapid7 Q1 2026 Threat Landscape Report: vulnerability exploitation (38%) leads MDR cases, with half of exploited CVEs zero-click.
Decision Insights Threat Desk • May 20, 2026
Dirty Frag affects Linux kernel 4.10+ by chaining xfrm-ESP and RxRPC page-cache flaws, enabling privilege escalation.
Decision Insights Threat Desk • May 18, 2026
SGLang has two unauthenticated RCE issues and one unauthenticated path traversal tied to specific configs and endpoints.
Decision Insights Signals • May 13, 2026
JupiterOne launched AI Attack Surface Management (AI ASM) and Unified Vulnerability Management (UVM) to provide relationship-aware asset and vulnerability context.
Decision Insights Signals • May 12, 2026
Cycode released ADLC Security generally available, adding AI visibility, governance, guardrails, and risk detection for agentic development.
Decision Insights Signals • May 12, 2026
Arctic Wolf introduced Aurora Exposure Management, combining vulnerability and attack surface management to prioritize and remediate cyber exposures.
Decision Insights Threat Desk • May 11, 2026
Casdoor’s Local File System provider lets authenticated upload users traverse paths and write arbitrary files outside $CASDOOR/files/ via /api/upload-resource.
Decision Insights Threat Desk • May 11, 2026
Multiple dnsmasq vulnerabilities could enable cache poisoning, DNSSEC-related DoS, information leakage, and DHCPv6-based local root code execution.