This article contrasts vulnerability management with the newer practice of exposure management. While vulnerability management focuses on identifying and fixing as many weaknesses …
This month’s security updates require immediate attention to both Windows and web browsers. Microsoft has a known exploited vulnerability (CVE-2026-20805) and two publicly disclose…
There’s been buzz around CVE-2025-56383 (published on Sept. 26, 2025), a hijacking vulnerability in Notepad++ v8.8.3 in which a DLL file can be swapped to execute malicious code. T…
When the conversation turns to cybersecurity, people often think of firewalls, intrusion detection systems or state-of-the-art endpoint protection. Yet, beneath these sophisticated…
Rule #1: Always Assume Breach An important principle in cybersecurity is to use the “assume breach” mentality, using the idea that an attacker has already infiltrated your system. …
AI tools have seen a meteoric rise in the workplace. What was once the domain of highly specialized tech roles is now commonplace: Ivanti’s 2025 Technology at Work Report found tha…
Here we are at the final Patch Tuesday for 2025. Microsoft has resolved 56 CVEs (two Critical and 54 Important). Included in this release is one known exploited (CVE-2025-62221) an…
How much does IT downtime really cost your organization? Most executives think it's just an annoying blip on the radar. But if you've ever been on the receiving end of a 3 AM call …
Whether it’s Warfighters deployed in the field or remote analysts supporting missions across the globe, mobile devices make these operations possible. But, these endpoints (and you…
Attack surfaces can expand without your organization even realizing it. And, lacking visibility into your external-facing assets and the vulnerabilities they may contain can lead t…
Cloud misconfigurations are a persistent challenge for Site Reliability Engineers (SREs). The sheer volume of high and critical alerts can overwhelm teams, making it difficult to p…
November Patch Tuesday is the first Patch Tuesday after the EoL of Windows 10. In the shadow of Windows 10, there are a number of other product EoLs of note. Exchange Server, for o…