Vulnerability Management
12 articles tagged “Vulnerability Management”.
-
This Week in Change Risk — Week of Nov 9, 2026
11 KEV adds incl. OpenSSH and Barracuda, a GitHub migration that hit Actions, Cloudflare's Workers change outage, Jira's 422 limits and NIST SP 800-221r1.
-
This Week in Change Risk — Week of Nov 2, 2026
Ivanti, WordPress and a 2024 Apple flaw join KEV, GitHub's retry-storm RCA, Datadog's Q3 usage warning, NIST CSWP 50 and Alpine's sshd restart lesson.
-
This Week in Change Risk — Week of Oct 26, 2026
php2shell, Cisco ASA and GitLab KEV adds, three entries with months-old fixes, Cloudflare's provider outage, ServiceNow Q3 margins, PCI's Oct 31 sunsets.
-
This Week in Change Risk — Week of Oct 19, 2026
Plex and BeyondTrust KEV adds, PHP's critical RCE fix, Google's europe-west2 power failure, the eMudhra CA compromise, and GitLab's fourth critical patch.
-
This Week in Change Risk — Week of Oct 12, 2026
Seven KEV adds with 3-day deadlines, a record Patch Tuesday, Cloudflare's rough week in Ashburn, ServiceNow AI Passport, and PCI SSC's Oct 31 sunsets.
-
This Week in Change Risk — Week of Oct 5, 2026
This week's change-risk digest: five old CVEs back on KEV, a NetScaler SAML bug, four critical GitHub incidents, and FedRAMP's Rev5 cutoff date.
-
This Week in Change Risk — Week of Sep 28, 2026
This week's change-risk digest: exploited NetScaler, FortiMail and SD-WAN bugs, an Azure outage from two colliding changes, and PCI Secure SLC v2.0.
-
This Week in Change Risk — Week of Sep 21, 2026
This week's change-risk digest: 7 CISA KEV entries on 3-day clocks, including F5 BIG-IP APM, Cloudflare's APAC subsea-cable congestion, and CRA reporting.
-
This Week in Change Risk — Week of Sep 14, 2026
This week's change-risk digest: 4 new CISA KEV entries with two CVSS-10 Cisco flaws, a GitHub P1 outage, PagerDuty's SRE Agent GA, and an RDS patch bug.
-
CISA BOD 26-04: Risk-Based Patch Deadlines for CABs
CISA BOD 26-04 replaces the flat 14-day KEV clock with 3, 14, and 60-day risk-based deadlines. What change managers and CABs must rebuild by December.
-
CISA's July 21 KEV Batch: How a CAB Should Triage 4 CVEs
CISA added four exploited CVEs on July 21, 2026 — WordPress, Langflow, and DD-WRT. A change manager's triage playbook under the new BOD 26-04 rules.
-
How to Read a CISA KEV Entry and What to Do Next
A field-by-field guide to CISA KEV catalog entries, BOD 22-01 obligations, and a 24-hour runbook for when a new KEV drops.