Vulnerability Management News

Scroll down for the latest news and information covering vulnerability management.

Browse other Risk Management topics

Don’t miss out!

Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events.

CISA Issues Advisories on Critical ICS Vulnerabilities Across Multiple Sectors

News18 Jul 2025

The US CISA has issued advisories for Industrial Control Systems vulnerabilities affecting multiple vendors including Johnson Controls, ABB, Hitachi Energy, and Schneider Electric

New “LameHug” Malware Deploys AI-Generated Commands

News18 Jul 2025

Most European Financial Firms Still Lagging on DORA Compliance

News17 Jul 2025

Education Sector is Most Exposed to Remote Attacks

News16 Jul 2025

CyCognito research finds that a third of education sector APIs, web apps and cloud assets are exposed to attack

NCSC Launches Vulnerability Research Institute to Boost UK Resilience

News15 Jul 2025

Grok-4 Jailbroken Two Days After Release Using Combined Attack

News14 Jul 2025

IoT Devices at Risk Due to eSIM Flaw in Kigen eUICC Cards

News14 Jul 2025

NCSC Urges Enterprises to Upgrade to Microsoft Windows 11 to Avoid Cyber Threats

News14 Jul 2025

Louis Vuitton UK Latest Retailer Hit by Data Breach

News14 Jul 2025

Louis Vuitton’s UK business has notified customers of a personal data breach

LLMs Fall Short in Vulnerability Discovery and Exploitation

News10 Jul 2025

Don’t miss out!

Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events.

White papers

Gcore Radar: DDoS Attack Trends Q3 to Q4, 2023

White Paper20 Mar 2024

5 Ways to Strengthen Your Active Directory Password Policy

White Paper30 Oct 2023

SASE Security Buyers Guide

White Paper26 Jan 2023

On-demand webinars

How to Implement Attack Surface Management in the AI and Cloud Age
3 Apr 2025 Webinar
Navigating Exposures in Energy ICS Environments
19 Dec 2024 Webinar
How to Proactively Remediate Rising Web Application Threats
30 May 2024 Webinar
How to Optimize Third-Party Risk Management Programs Through NIST CSF 2.0
16 May 2024 Webinar
Experiencing a DDoS Simulation to Enhance Defenses
2 May 2024 Webinar
How Can the Boardroom Boost Cyber Resilience?
29 Feb 2024 Webinar
Mastering Software Supply Chain Security with Strategic Defense Mechanisms
30 Nov 2023 Webinar
Forward-Thinking Practices to Manage IT Risk
12 Oct 2023 Webinar
Vulnerability Management: Why a Risk-Based Approach is Essential
28 Sep 2023 Webinar
The Infosecurity Magazine End of Year Xmas Quiz (Feat. The Beer Farmers)
15 Dec 2022 Webinar

What’s hot on Infosecurity Magazine?

Hundreds of Malicious Domains Registered Ahead of Prime Day

News7 Jul 2025

Microsoft Exposes Scattered Spider’s Latest Tactics

News17 Jul 2025

One in 12 US/UK Employees Uses Chinese GenAI Tools

News17 Jul 2025

US Data Breaches Head for Another Record Year After 11% Surge

News17 Jul 2025

SquidLoader Malware Campaign Targets Hong Kong Financial Sector

News16 Jul 2025

Louis Vuitton UK Latest Retailer Hit by Data Breach

News14 Jul 2025

Indian Cyber Espionage Group Targets Italian Government

News11 Jul 2025

Microsoft Exposes Scattered Spider’s Latest Tactics

News17 Jul 2025

ISACA Addresses Experience Gap with CISA Associate Designation

News11 Jul 2025

IoT Devices at Risk Due to eSIM Flaw in Kigen eUICC Cards

News14 Jul 2025

Mastering Emerging Regulations: DORA, NIS2 and AI Act Compliance

Webinar17 Jul 2025

AI Cloaking Tools Enable Harder-to-Detect Cyber-Attacks

News17 Jul 2025

Mastering Emerging Regulations: DORA, NIS2 and AI Act Compliance

Webinar17 Jul 2025

Predicting and Prioritizing Cyber Attacks Using Threat Intelligence

Webinar26 Jun 2025

Cybersecurity Employment: Making Sense of Conflicting Messaging

Webinar19 May 2025

Reimagining the SOC: From Reactive to Resilient

Webinar17 Jun 2025

Why Your Mainframe Security Strategy Could Be Your Biggest Business Risk

Webinar18 Jun 2025

How CISO's Can Survive and Thrive in a Complex Cyber Landscape

Webinar18 Feb 2025

#Infosec2025: How CISOs Can Manage Budgets Effectively Amid Spending Restraints with Madelein van der Hout (video)

Interview5 Jun 2025

Scattered Spider Uses Tech Vendor Impersonation and Phishing Kits to Target Helpdesks

News6 Jun 2025

#Infosec2025: Understanding AI's Role in Exploiting Human Cyber Vulnerabilities (video)

Interview5 Jun 2025

How to Incentivize Security by Design

News Feature26 May 2025

How AI and Verifiable Credentials Are Redefining Digital Identities

Webinar27 Mar 2025

#Infosec2025: NCA Cyber Intel Head on Cybercrime's New Post-Trust Era (video)

Interview3 Jun 2025

Podcasts

The Team are Joined by Cybersecurity Experts to Review 2022 and How to Prepare Information Security for 2023
14 Dec 2022 Podcast
Beth Maundrill is joined by Dr. Jason Nurse, Associate Professor in Cyber Security at the University of Kent.
16 Nov 2022 Podcast
Beth Maundrill and James Coker analyze Insider Threats as September is National Insider Threats Awareness Month.
27 Sep 2022 Podcast
Into Security Podcast - Episode 15
29 May 2020 Podcast

Nippon Steel IT Subsidiary Hit by "Zero-Day Attack," Causing Data Breach

News10 Jul 2025

Unmasking the SafePay Ransomware Group

News Feature10 Jul 2025

Microsoft Patch Tuesday: One Zero-Day and A Potential 'Wormable' Flaw

News9 Jul 2025

Malicious Open Source Packages Surge 188% Annually

News8 Jul 2025

Sonatype’s latest Open Source Malware Index report has identified more than 16,000 malicious open source packages, representing a 188% annual increase

Researchers Share CitrixBleed 2 Detection Analysis After Initial Hold

News7 Jul 2025

WordPress Plugin Flaw Exposes 600,000 Sites to File Deletion

News3 Jul 2025

A severe flaw identified in the Forminator WordPress plugin allows arbitrary file deletion and potential site takeover

Privilege Escalation Flaw Found in Azure Machine Learning Service

News3 Jul 2025

CVE Program Launches Two New Forums to Enhance CVE Utilization

News3 Jul 2025

Automation and Vulnerability Exploitation Drive Mass Ransomware Breaches

News3 Jul 2025

ReliaQuest warns that initial access vulnerability exploitation is driving successful ransomware attacks

Linux Users Urged to Patch Critical Sudo CVE

News3 Jul 2025

Blogs

Why 100% of CEH Professionals Would Recommend the Certification to Their Peers: Insights from the CEH HOF 2025 Industry Report

Blog18 Jul 2025

How Simple IAM Control Could Have Prevented Major Cyber-Attacks

Blog16 Jul 2025

Next-gen infosec

How to Prevent Data Leakages

Next-Gen11 Aug 2023

Top Cloud Misconceptions that Could Damage Your Organization

Next-Gen4 Aug 2023

Improve Asset Visibility in OT Security With Hybrid AI-Cloud Approaches

Next-Gen21 Jul 2023