Vulnerability: Page

  • A towering Citrix-branded expo sign; the tagline: "Better experience"
    Image attribution tooltip

    Citrix via Flickr

    Image attribution tooltip

    Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts

    Security teams received urgent calls to disconnect servers before authorities confirmed critical zero-day flaws.

    By • Sept. 28, 2026
  • The ChatGPT, Claude, Gemini, and Grok AI apps are shown on a smartphone screen
    Image attribution tooltip
    Asanka Ratnayake via Getty Images
    Image attribution tooltip

    Niche AI tools pose major cybersecurity risk to infrastructure operators

    Security vetting tools and processes weren’t designed with obscure AI services in mind, according to TrendAI.

    By • Sept. 28, 2026
  • a software developer in an office setting, using a laptop and two external monitors on a desk Explore the Trendline➔
    Image attribution tooltip
    Getty Images
    Image attribution tooltip
    Trendline

    Vulnerability Management

    The rapid advancement Ai has changed the debate over secure software in the entrprise.

    By Cybersecurity Dive staff
  • The word "Wiz" is spelled out in brushed-gray letters on a glass door
    Image attribution tooltip
    Courtesy of Wiz
    Image attribution tooltip

    Wiz uses AI to find vulnerabilities in critical infrastructure

    The Google subsidiary, which helped a railroad and two hospitals, invited others to apply for its free scanning service.

    By • Sept. 24, 2026
  • Businessman with protective hands gesture and insurance icons.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Insurance sector begins to offer clarity on AI-related cyber claims

    The emergence of agentic AI and frontier models has led to widespread uncertainty for policyholders.

    By • Sept. 22, 2026
  • A hacker in data center server room.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    China-nexus actor steals thousands of documents in monthslong exploitation campaign

    Researchers suspect the hacker employed LLMs to develop custom tools.

    By • Sept. 21, 2026
  • Hands typing on silver laptop keyboard.
    Image attribution tooltip
    Permission granted by Arctic Wolf
    Image attribution tooltip
    Sponsored by Arctic Wolf

    More CVEs than ever. The same old ones keep getting exploited.

    Vulnerability volume is climbing fast. The exploited ones are old and already patchable.

    Sept. 21, 2026
  • CISA, cybersecurity, agency
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    CISA ends weekly vulnerability roundups as part of shift to prioritization approach

    The agency wants to help companies sort through the AI-fueled avalanche of bug reports.

    By • Sept. 18, 2026
  • Daimler Truck manufacturing engine line workers
    Image attribution tooltip

    Retrived from Daimler Truck 

    Image attribution tooltip

    Manufacturers make patching progress, but identity management still major weakness

    Misconfigurations remain widespread in the manufacturing sector, including internet-accessible remote-access software, a new report found.

    By • Sept. 17, 2026
  • The Cisco logo is seen suspended in the air in front of an array of blue lights
    Image attribution tooltip
    David Ramos via Getty Images
    Image attribution tooltip

    Hackers exploit zero-day flaw in Cisco email gateway

    Researchers warn the vulnerability could be used by state-linked actors for espionage.

    By • Sept. 16, 2026
  • man authenticating with a fingerprint on screen with 2FA label
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Security teams increasingly outflanked by AI agents

    A report warns that non-human identities are growing beyond the ability of existing systems to track. 

    By • Sept. 14, 2026
  • A hand holds a magnifying glass up to a red exclamation point enclosed by a red triangle
    Image attribution tooltip
    tadamichi via Getty Images
    Image attribution tooltip

    Malicious actors already using critical GitLab flaw, CISA and others warn

    The vulnerability could let unauthenticated users access sensitive files from software-development environments.

    By • Sept. 14, 2026
  • words zero day highlighted in code
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    N-able issues patch for zero-day flaw

    Security researchers warned the company of unusual threat activity in a recently patched N-able environment.

    By • Sept. 8, 2026
  • A sign in front of a modern office building with the SonicWall logo on it.
    Image attribution tooltip
    Permission granted by SonicWall
    Image attribution tooltip

    SonicWall urges immediate patching of chained vulnerabilities

    Just weeks after a wave of ransomware attacks, new flaws in SMA1000 series appliances are being exploited.

    By • Sept. 3, 2026
  • Two people wearing suits sit at a table with U.S. and Texas flags behind them and other people sitting around them.
    Image attribution tooltip
    Courtesy of Office of the Texas Governor
    Image attribution tooltip

    Frontier AI helps exploit flaws in tests using key industrial devices

    A report showed that Claude could help hackers develop attack strategies targeting PLCs used by water utilities and other industries.

    By • Sept. 1, 2026
  • Printer
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    PaperCut issues emergency patches as threat actors target chained vulnerabilities

    The print management software maker faced a wave of attacks in 2023 aimed at higher education customers.

    By • Updated Sept. 1, 2026
  • An American flag and a flag bearing the seal of the Cybersecurity and Infrastructure Security Agency (which features an eagle holding a shield with elements of a skyline on it) flank a large upright square panel bearing the same CISA seal. On the wall to the right of the panel and the flags, a row of digital clocks shows the time in the four major U.S. time zones.
    Image attribution tooltip
    Eric Geller/Cybersecurity Dive
    Image attribution tooltip

    CISA identifies security hurdles that led to very different results in two red-team engagements

    The agency said its recent simulated cyberattacks offered several key lessons for many organizations.

    By • Aug. 28, 2026
  • Microsoft building with logo
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Researchers warn about chained SharePoint sequence

    An authentication bypass flaw is already under exploitation, the latest in a series of recent SharePoint attacks. 

    By • Updated Aug. 26, 2026
  • A hand holds a magnifying glass up to a red exclamation point enclosed by a red triangle
    Image attribution tooltip
    tadamichi via Getty Images
    Image attribution tooltip

    CISA orders agencies to fix exploited Zimbra vulnerability

    The collaboration software’s developer took almost a full month to patch the flaw after disclosing it.

    By • Aug. 25, 2026
  • Microsoft building exterior
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Microsoft discloses maximum severity flaw in Entra ID

    The company said the remote-code execution vulnerability has been fully mitigated and no further action is necessary.

    By • Aug. 21, 2026
  • Siemens flags fly in front of Siemens AG headquarters in Berlin, Germany, on Aug. 20, 2024.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    AI-backed campaign targeting vulnerable Siemens S7 devices, CISA and FBI warn

    Hackers are developing scripts disguised as legitimate software in attacks aimed at multiple industries, including energy and water.

    By • Updated Aug. 20, 2026
  • a software developer inspects code on a screen
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    GitLab issues emergency patch for critical code-injection flaw

    Researchers warn that unauthenticated attackers would be able to delete or modify publicly accessible projects.

    By • Updated Aug. 19, 2026
  • A man stands at a lectern near signs that read "Winning the AI race"
    Image attribution tooltip
    Chip Somodevilla via Getty Images
    Image attribution tooltip
    Deep Dive

    AI-powered vulnerability clearinghouse faces deep skepticism, major challenges

    The U.S. government’s promises about the Gold Eagle coordination program are overblown, experts said, but the initiative could help organizations prioritize patching and mitigation.

    By • Aug. 18, 2026
  • SAP office exterior.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip

    Critical flaw in SAP Commerce Cloud faces initial exploitation attempts

    The vulnerability has a maximum severity score of 10, indicating serious potential impact and relative ease to exploit by an attacker.

    By • Updated Aug. 18, 2026
  • A large sign says "Cisco" in red letters. The sign sits on a grassy lawn in front of a building with many windows.
    Image attribution tooltip
    Sundry Photography via Getty Images
    Image attribution tooltip

    Cisco says software vulnerability could let hackers crash firewalls

    Threat actors have already begun exploiting the flaw, according to the U.S. government.

    By • Aug. 12, 2026
  • A digital depiction of a red triangle sign with an exclamation point in the center with binary code in the background.
    Image attribution tooltip
    Getty Images
    Image attribution tooltip
    Deep Dive

    CVE Program eyes automation and globalization to weather AI ‘vulnpocalypse’

    The vulnerability coordination project has had a rocky few years, but a key leader says it will “flourish and improve.”

    By • Aug. 11, 2026