Blog

Security Insights

Deep dives, expert analysis, and practical guidance on exposure management, adversarial validation, and the future of AI-driven exposure management.

Top 5 CVEs and Vulnerabilities of May 2024
Vulnerability IntelligenceVulnerability Management

Top 5 CVEs and Vulnerabilities of May 2024

May brought a fresh batch of security headaches. This month, we're focusing on critical vulnerabilities in widely used software like Apache, Gitlab, and Github. These flaws could allow attackers to steal data, hijack systems, or wreak havoc in your network. Let's break down the top 5 CVEs you need t

Jun 3, 20246 min
Open Source Security: How Strobes Integrates Security into Your Dev Workflow
Cloud Security

Open Source Security: How Strobes Integrates Security into Your Dev Workflow

Cloud-native development thrives on open source software (OSS). It offers readily available, pre-built components that accelerate development lifecycles. However, this very advantage presents a significant Open Source Security challenge for DevSecOps: OSS security vulnerabilities. A single critical

May 8, 20247 min
A Closer Look at Top 5 Vulnerabilities of April 2024
Vulnerability IntelligenceVulnerability Management

A Closer Look at Top 5 Vulnerabilities of April 2024

Keeping pace with the latest cybersecurity threats is vital for organizations of all sizes. Here at Strobes, our security team has assembled a list of the top 5 most critical Common Vulnerabilities and Exposures (CVEs) discovered in April 2024. By staying informed about these vulnerabilities, you ca

May 3, 20245 min
Atlassian Patches Critical Bamboo Bug and Over 20 Other Vulnerabilities
Vulnerability Intelligence

Atlassian Patches Critical Bamboo Bug and Over 20 Other Vulnerabilities

Atlassian recently addressed a critical security flaw (CVE-2024-1597) impacting Bamboo Data Center and Server versions. This SQL injection vulnerability, discovered by SonarSource security researcher Paul Gerste, allows attackers to potentially compromise vulnerable systems without needing user inte

Mar 22, 20242 min
Simplifying Continuous Pentests: How Strobes PTaaS Makes Security Testing Efficient
Penetration Testing

Simplifying Continuous Pentests: How Strobes PTaaS Makes Security Testing Efficient

Continuous pentesting involves repeatedly conducting penetration tests to uncover vulnerabilities in an organization’s IT systems and networks. While critical for security, the process can feel tedious and expensive without the right tools and approach. A New Approach to Continuous Pentesting What i

Nov 7, 20234 min
How companies can quickly identify the most critical issues using Strobes (Part-1)
Vulnerability Prioritization

How companies can quickly identify the most critical issues using Strobes (Part-1)

Traditionally, when an organization needs to identify the critical issues that they have to address, all the reported vulnerabilities from all the sources have to be sifted through manually and then a list has to be compiled. This list needs to be assigned to the appropriate teams and then the progr

Aug 21, 20234 min