Cybersecurity
Defender-side analysis of the patching and vulnerability decisions that force security, operations, and change control onto the same clock.
Cybersecurity coverage, page 2
- Cybersecurity
This Week in Change Risk — Week of Sep 14, 2026
This week's change-risk digest: 4 new CISA KEV entries with two CVSS-10 Cisco flaws, a GitHub P1 outage, PagerDuty's SRE Agent GA, and an RDS patch bug.
- Cybersecurity
This Week in Change Risk — Week of Sep 7, 2026
A record 970-plus-flaw Patch Tuesday with two exploited zero-days, MikroTik and Citrix NetScaler KEV additions, and Cloudflare Workers wobbles this week.
- Cybersecurity
This Week in Change Risk — Week of Aug 31, 2026
AI infrastructure hit the CISA KEV catalog hard this week: LiteLLM, Kestra, and JFrog joined nine new exploited CVEs. Plus SonicWall, PaperCut, and DORA.
- Cybersecurity
This Week in Change Risk — Week of Aug 24, 2026
A CVSS-10.0 Oracle flaw with CISA's tightest three-day deadline, six more KEV entries, GitHub's outage pledge, and PagerDuty's SRE-agent drop.
- Cybersecurity
This Week in Change Risk — Week of Aug 17, 2026
Eight new CISA KEV entries led by a critical VMware vCenter flaw, GitHub's near-8-hour outage post-mortem, and NIS2's October deadline closing in.
- Cybersecurity
This Week in Change Risk — Week of Aug 10, 2026
A CVSS 10 Metabase SQL injection in KEV with named victims, Microsoft's ~400-CVE August Patch Tuesday, and NIS2's October deadline closing in.
- Cybersecurity
KEV Batch Triage: Three Owners, Two Deadlines, One Update
CISA's Aug 11 KEV update added three exploited CVEs across three teams with two deadlines. How a CAB sequences the batch without CVSS tunnel vision.
- Cybersecurity
This Week in Change Risk — Week of Aug 3, 2026
A CVSS 9.8 JetBrains TeamCity RCE in KEV, two GitHub Actions outages in two days, Microsoft's Aug 11 Patch Tuesday, and NIS2 pressure this week.
- Cybersecurity
N-able N-central KEV: When the Emergency Patch Is Incomplete
CISA added N-able N-central to KEV after an incomplete fix left every build before 2026.3.1.7 exploitable. A CAB playbook for the re-remediation.
- Cybersecurity
This Week in Change Risk — Week of Jul 27, 2026
A CVSS 10.0 Arista SD-WAN flaw in KEV, a GitHub Copilot incident, Datadog's DASH launches, and the ECB's AI deadline — the week's change-risk signals.
- Cybersecurity
This Week in Change Risk — Week of Jul 20, 2026
KEV batch of 6, a GitHub Actions outage, Datadog's AI incident tooling, and the NIS2 deadline confusion — the week's change-risk signals for CABs.
- Cybersecurity
CISA's July 21 KEV Batch: How a CAB Should Triage 4 CVEs
CISA added four exploited CVEs on July 21, 2026 — WordPress, Langflow, and DD-WRT. A change manager's triage playbook under the new BOD 26-04 rules.