Vulnerability Management
8 articles tagged “Vulnerability Management”.
-
This Week in Change Risk — Week of Oct 12, 2026
Seven KEV adds with 3-day deadlines, a record Patch Tuesday, Cloudflare's rough week in Ashburn, ServiceNow AI Passport, and PCI SSC's Oct 31 sunsets.
-
This Week in Change Risk — Week of Oct 5, 2026
This week's change-risk digest: five old CVEs back on KEV, a NetScaler SAML bug, four critical GitHub incidents, and FedRAMP's Rev5 cutoff date.
-
This Week in Change Risk — Week of Sep 28, 2026
This week's change-risk digest: exploited NetScaler, FortiMail and SD-WAN bugs, an Azure outage from two colliding changes, and PCI Secure SLC v2.0.
-
This Week in Change Risk — Week of Sep 21, 2026
This week's change-risk digest: 7 CISA KEV entries on 3-day clocks, including F5 BIG-IP APM, Cloudflare's APAC subsea-cable congestion, and CRA reporting.
-
This Week in Change Risk — Week of Sep 14, 2026
This week's change-risk digest: 4 new CISA KEV entries with two CVSS-10 Cisco flaws, a GitHub P1 outage, PagerDuty's SRE Agent GA, and an RDS patch bug.
-
CISA BOD 26-04: Risk-Based Patch Deadlines for CABs
CISA BOD 26-04 replaces the flat 14-day KEV clock with 3, 14, and 60-day risk-based deadlines. What change managers and CABs must rebuild by December.
-
CISA's July 21 KEV Batch: How a CAB Should Triage 4 CVEs
CISA added four exploited CVEs on July 21, 2026 — WordPress, Langflow, and DD-WRT. A change manager's triage playbook under the new BOD 26-04 rules.
-
How to Read a CISA KEV Entry and What to Do Next
A field-by-field guide to CISA KEV catalog entries, BOD 22-01 obligations, and a 24-hour runbook for when a new KEV drops.