Blog

Security Insights

Deep dives, expert analysis, and practical guidance on exposure management, adversarial validation, and the future of AI-driven exposure management.

Vulnerability IntelligenceVulnerability Management

Top 5 Vulnerabilities for March 2024: A Closer Look at the XZ Utils Supply Chain Attack

March may have roared in like a lion, but for cybersecurity professionals, it was more like a backdoor sneaking into a critical utility. This month, we've seen some serious contenders, but one in particular has sent shockwaves through the open-source software (OSS) community: CVE-2024-3094, a sneaky

Apr 2, 20245 min

Vulnerability Intelligence

Atlassian Patches Critical Bamboo Bug and Over 20 Other Vulnerabilities

Atlassian recently addressed a critical security flaw (CVE-2024-1597) impacting Bamboo Data Center and Server versions. This SQL injection vulnerability, discovered by SonarSource security researcher Paul Gerste, allows attackers to potentially compromise vulnerable systems without needing user inte

Mar 22, 20242 min

Vulnerability IntelligenceVulnerability Management

February 2024 Top CVEs and Vulnerabilities Report

In February, hearts weren't the only things feeling vulnerable. The cyber arena saw a variety of critical exposures across multiple platforms and applications. While patching might not be as romantic as chocolates or roses, organizations and individuals alike must stay protected. Here, we highlight

Mar 1, 20243 min

Vulnerability IntelligenceVulnerability Management

January 2024 Top CVE and Vulnerabilities Report

2024 is off to a crazy start in the cybersecurity world! Acquisitions are happening left, right, and center, and new cyber threats are emerging like weeds after a rainstorm. But fear not, security warriors! We're here to dish on the hottest vulnerabilities that have popped up this January, the kind

Feb 1, 20246 min

Vulnerability Management

Understanding GitLab's Critical Security Release: CVE-2023-5009

Overview of the Vulnerability GitLab's recent critical security release addresses a vulnerability identified as CVE-2023-5009. This vulnerability, with a CVSS score of 9.6, posed a significant risk, particularly in the pipeline execution processes of GitLab's software. It affected versions before 16

Jan 12, 20242 min

Vulnerability Intelligence

A Critical Remote Code Execution(RCE) Vulnerability in Apache Struts2 Flaw Puts Your Web Apps at Risk

The web development world is constantly on guard against security threats, and a recent discovery in the popular Apache Struts2 framework serves as a stark reminder. This critical Remote Code Execution vulnerability, known as CVE-2023-50164, exposes a serious flaw that could allow malicious actors t

Dec 13, 20233 min