Cybersecurity
Defender-side analysis of the patching and vulnerability decisions that force security, operations, and change control onto the same clock.
Cybersecurity coverage, page 2
- Cybersecurity
KEV Batch Triage: Three Owners, Two Deadlines, One Update
CISA's Aug 11 KEV update added three exploited CVEs across three teams with two deadlines. How a CAB sequences the batch without CVSS tunnel vision.
- Cybersecurity
This Week in Change Risk — Week of Aug 3, 2026
A CVSS 9.8 JetBrains TeamCity RCE in KEV, two GitHub Actions outages in two days, Microsoft's Aug 11 Patch Tuesday, and NIS2 pressure this week.
- Cybersecurity
N-able N-central KEV: When the Emergency Patch Is Incomplete
CISA added N-able N-central to KEV after an incomplete fix left every build before 2026.3.1.7 exploitable. A CAB playbook for the re-remediation.
- Cybersecurity
This Week in Change Risk — Week of Jul 27, 2026
A CVSS 10.0 Arista SD-WAN flaw in KEV, a GitHub Copilot incident, Datadog's DASH launches, and the ECB's AI deadline — the week's change-risk signals.
- Cybersecurity
This Week in Change Risk — Week of Jul 20, 2026
KEV batch of 6, a GitHub Actions outage, Datadog's AI incident tooling, and the NIS2 deadline confusion — the week's change-risk signals for CABs.
- Cybersecurity
CISA's July 21 KEV Batch: How a CAB Should Triage 4 CVEs
CISA added four exploited CVEs on July 21, 2026 — WordPress, Langflow, and DD-WRT. A change manager's triage playbook under the new BOD 26-04 rules.
- Cybersecurity
How to Read a CISA KEV Entry and What to Do Next
A field-by-field guide to CISA KEV catalog entries, BOD 22-01 obligations, and a 24-hour runbook for when a new KEV drops.
- Cybersecurity
Patch Tuesday: What It Is and How to Plan Around It
Patch Tuesday schedule 2026, MSRC cadence, and a CAB-ready playbook for scheduling change windows around Microsoft's monthly updates.