The Cybersecurity and Infrastructure Security Agency plans to release a binding directive on Wednesday that tasks the federal ...

CISA’s new BOD 26-04 requires federal agencies to prioritize the remediation of vulnerabilities in the KEV catalog, based on ...

The Cybersecurity and Infrastructure Security Agency on Wednesday directed federal agencies to adopt a new risk-based ...

The move is part of CISA’s response “to the current threat landscape where AI software services can assist threat actors to ...

CISA published its guide on Stakeholder-Specific Vulnerability Categorization (SSVC), a vulnerability management methodology that assesses vulnerabilities and prioritizes remediation efforts based on ...

When the pace of discovery and exploitation moves to machine speed, the unit of defense can no longer be a human analyst or a ...

Cisco's Eric Wenger says agencies must accelerate patching as artificial intelligence compresses exploit timelines.

When videoconferencing service Zoom searched for a better way to assign a severity to vulnerabilities found during bug bounty programs, the company's security team could not find a suitable approach: ...

Automatically translates exploit intelligence into immediate protection across primary attack paths SUNNYVALE, Calif., May 27, 2026 (GLOBE NEWSWIRE) -- Proofpoint, Inc., a leading cybersecurity and ...

Software supply chain startup NetRise Inc. today announced a major update to its platform aimed at improving how organizations identify and manage vulnerabilities in the software running on devices ...

The soon-to-be-released Version 4.0 of the Common Vulnerability Scoring System (CVSS) promises to fix a number of issues with the severity metric for security bugs. But vulnerability experts say that ...

CEO of Tromzo—Tromzo accelerates remediation of risks from code to cloud. Built by security practitioners & backed by 25+ CISOs. Engineers, security teams and CISOs constantly juggle multiple urgent ...