#cisakev — Public Fediverse posts

https://www.europesays.com/ch-fr/131467/ Noyau Linux : la chaîne d’exploitation « dirty frag » ouvre un accès root sur les serveurs non patchés #CERTFR #CISAKEV #Cve202631431 #Cve202643284 #Cve202643500 #DirtyFrag #ElévationDePrivilèges #LinuxKernel #NIS2 #Science #ScienceAndTechnology #Sciences #SciencesEtTechnologies #Suisse #Technologies #Technology #vulnérabilité

Third-party ecosystems are structurally exposed.
Black Kite’s 2026 report reframes supply chain cyber risk from “weakest link” theory to concentration dynamics.

Key systemic indicators:
• 5.28 downstream victims per breach (2025 average)
• 10-day median detection vs. 73-day median disclosure
• 53%+ organizations with at least one critical vulnerability
• 23%+ with corporate credentials exposed

Top 50 shared vendors:
– 70% KEV exposure
– 84% CVSS ≥ 8
– 62% stealer-log credential presence
– 52% breach history

Shared infrastructure nodes are now strategic attack surfaces.
Security teams must shift toward:
Dependency mapping
Concentration analytics
Active intelligence monitoring
Exposure propagation modeling
Is your organization modeling systemic fragility — or auditing in isolation?

Source: https://blackkite.com/press-releases/black-kites-2026-third-party-breach-report-identifies-risk-concentration-as-the-primary-catalyst-for-global-cascading-failures

Engage below.
Follow TechNadu for advanced infosec, vendor risk, and threat intelligence coverage.

#Infosec #ThirdPartyRisk #VendorSecurity #ThreatIntelligence #CISAKEV #CyberExposure #Ransomware #SupplyChainSecurity #SecurityEngineering #CyberResilience #RiskAnalytics

Third-party ecosystems are structurally exposed.
Black Kite’s 2026 report reframes supply chain cyber risk from “weakest link” theory to concentration dynamics.

Key systemic indicators:
• 5.28 downstream victims per breach (2025 average)
• 10-day median detection vs. 73-day median disclosure
• 53%+ organizations with at least one critical vulnerability
• 23%+ with corporate credentials exposed

Top 50 shared vendors:
– 70% KEV exposure
– 84% CVSS ≥ 8
– 62% stealer-log credential presence
– 52% breach history

Shared infrastructure nodes are now strategic attack surfaces.
Security teams must shift toward:
Dependency mapping
Concentration analytics
Active intelligence monitoring
Exposure propagation modeling
Is your organization modeling systemic fragility — or auditing in isolation?

Source: https://blackkite.com/press-releases/black-kites-2026-third-party-breach-report-identifies-risk-concentration-as-the-primary-catalyst-for-global-cascading-failures

Engage below.
Follow TechNadu for advanced infosec, vendor risk, and threat intelligence coverage.

#Infosec #ThirdPartyRisk #VendorSecurity #ThreatIntelligence #CISAKEV #CyberExposure #Ransomware #SupplyChainSecurity #SecurityEngineering #CyberResilience #RiskAnalytics

Third-party ecosystems are structurally exposed.
Black Kite’s 2026 report reframes supply chain cyber risk from “weakest link” theory to concentration dynamics.

Key systemic indicators:
• 5.28 downstream victims per breach (2025 average)
• 10-day median detection vs. 73-day median disclosure
• 53%+ organizations with at least one critical vulnerability
• 23%+ with corporate credentials exposed

Top 50 shared vendors:
– 70% KEV exposure
– 84% CVSS ≥ 8
– 62% stealer-log credential presence
– 52% breach history

Shared infrastructure nodes are now strategic attack surfaces.
Security teams must shift toward:
Dependency mapping
Concentration analytics
Active intelligence monitoring
Exposure propagation modeling
Is your organization modeling systemic fragility — or auditing in isolation?

Source: https://blackkite.com/press-releases/black-kites-2026-third-party-breach-report-identifies-risk-concentration-as-the-primary-catalyst-for-global-cascading-failures

Engage below.
Follow TechNadu for advanced infosec, vendor risk, and threat intelligence coverage.

#Infosec #ThirdPartyRisk #VendorSecurity #ThreatIntelligence #CISAKEV #CyberExposure #Ransomware #SupplyChainSecurity #SecurityEngineering #CyberResilience #RiskAnalytics

Third-party ecosystems are structurally exposed.
Black Kite’s 2026 report reframes supply chain cyber risk from “weakest link” theory to concentration dynamics.

Key systemic indicators:
• 5.28 downstream victims per breach (2025 average)
• 10-day median detection vs. 73-day median disclosure
• 53%+ organizations with at least one critical vulnerability
• 23%+ with corporate credentials exposed

Top 50 shared vendors:
– 70% KEV exposure
– 84% CVSS ≥ 8
– 62% stealer-log credential presence
– 52% breach history

Shared infrastructure nodes are now strategic attack surfaces.
Security teams must shift toward:
Dependency mapping
Concentration analytics
Active intelligence monitoring
Exposure propagation modeling
Is your organization modeling systemic fragility — or auditing in isolation?

Source: https://blackkite.com/press-releases/black-kites-2026-third-party-breach-report-identifies-risk-concentration-as-the-primary-catalyst-for-global-cascading-failures

Engage below.
Follow TechNadu for advanced infosec, vendor risk, and threat intelligence coverage.

#Infosec #ThirdPartyRisk #VendorSecurity #ThreatIntelligence #CISAKEV #CyberExposure #Ransomware #SupplyChainSecurity #SecurityEngineering #CyberResilience #RiskAnalytics

CISA Silently Updates Vulnerabilities Exploited by Ransomware Groups https://thecyberexpress.com/vulnerabilities-exploited-by-ransomware-groups/ #FortinetVulnerability #Ivantivulnerability #TheCyberExpressNews #ThreatIntelligence #paloaltonetworks #ransomwareattack #TheCyberExpress #Vulnerabilities #FirewallDaily #cybersecurity #CyberThreats #cyberattacks #Ransomware #CyberNews #Microsoft #CISAKEV #CISA

CISA Silently Updates Vulnerabilities Exploited by Ransomware Groups https://thecyberexpress.com/vulnerabilities-exploited-by-ransomware-groups/ #FortinetVulnerability #Ivantivulnerability #TheCyberExpressNews #ThreatIntelligence #paloaltonetworks #ransomwareattack #TheCyberExpress #Vulnerabilities #FirewallDaily #cybersecurity #CyberThreats #cyberattacks #Ransomware #CyberNews #Microsoft #CISAKEV #CISA

CISA Silently Updates Vulnerabilities Exploited by Ransomware Groups https://thecyberexpress.com/vulnerabilities-exploited-by-ransomware-groups/ #FortinetVulnerability #Ivantivulnerability #TheCyberExpressNews #ThreatIntelligence #paloaltonetworks #ransomwareattack #TheCyberExpress #Vulnerabilities #FirewallDaily #cybersecurity #CyberThreats #cyberattacks #Ransomware #CyberNews #Microsoft #CISAKEV #CISA

CISA Silently Updates Vulnerabilities Exploited by Ransomware Groups https://thecyberexpress.com/vulnerabilities-exploited-by-ransomware-groups/ #FortinetVulnerability #Ivantivulnerability #TheCyberExpressNews #ThreatIntelligence #paloaltonetworks #ransomwareattack #TheCyberExpress #Vulnerabilities #FirewallDaily #cybersecurity #CyberThreats #cyberattacks #Ransomware #CyberNews #Microsoft #CISAKEV #CISA

🚨 Microsoft’s January 2026 Patch Tuesday dropped 114 fixes—including a CISA KEV-listed Windows zero-day.

Full Weekly Cybersecurity Brief available here.

#PatchTuesday #Cybersecurity #WindowsVulnerability #CISAKEV #CVE

CISA Closes 10 Emergency Directives as Vulnerability Catalog Takes Over https://www.securityweek.com/cisa-closes-10-emergency-directives-as-vulnerability-catalog-takes-over/ #Vulnerabilities #vulnerability #Featured #CISAKEV #CISA

Critical HPE OneView Vulnerability Exploited in Attacks https://www.securityweek.com/critical-hpe-oneview-vulnerability-exploited-in-attacks/ #Vulnerabilities #vulnerability #HPEOneView #exploited #Featured #CISAKEV #HPE

CISA Known Exploited Vulnerabilities Soared 20% in 2025 https://thecyberexpress.com/cisa-known-exploited-vulnerabilities-kev-2025/ #KnownexploitedvulnerabilitiesCISA #TheCyberExpressNews #ransomwareattack #Vulnerabilities #TheCyberExpress #FirewallDaily #cybersecurity #Vulnerability #CyberThreats #Ransomware #CyberNews #CISAKEV #cyble #CISA

CISA KEV Catalog Expanded 20% in 2025, Topping 1,480 Entries https://www.securityweek.com/cisa-kev-catalog-expanded-20-in-2025-topping-1480-entries/ #Vulnerabilities #vulnerability #CISAKEV #CISA

CISA Warns of Exploited Flaw in Asus Update Tool https://www.securityweek.com/cisa-warns-of-exploited-flaw-in-asus-update-tool/ #Vulnerabilities #vulnerability #exploited #CISAKEV #Asus

CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack https://www.securityweek.com/cisa-warns-of-scadabr-vulnerability-after-hacktivist-ics-attack/ #Vulnerabilities #vulnerability #exploited #Featured #CISAKEV #OpenPLC #ScadaBR #ICS/OT #HMI #ICS #OT

Critical WatchGuard Firebox Vulnerability Exploited in Attacks https://www.securityweek.com/critical-watchguard-firebox-vulnerability-exploited-in-attacks/ #Vulnerabilities #WatchGuard #exploited #firewall #CISAKEV #Firebox

Critical WatchGuard Firebox Vulnerability Exploited in Attacks https://www.securityweek.com/critical-watchguard-firebox-vulnerability-exploited-in-attacks/ #Vulnerabilities #WatchGuard #exploited #firewall #CISAKEV #Firebox

Critical WatchGuard Firebox Vulnerability Exploited in Attacks https://www.securityweek.com/critical-watchguard-firebox-vulnerability-exploited-in-attacks/ #Vulnerabilities #WatchGuard #exploited #firewall #CISAKEV #Firebox

Critical WatchGuard Firebox Vulnerability Exploited in Attacks https://www.securityweek.com/critical-watchguard-firebox-vulnerability-exploited-in-attacks/ #Vulnerabilities #WatchGuard #exploited #firewall #CISAKEV #Firebox

CISA Warns of CWP Vulnerability Exploited in the Wild https://www.securityweek.com/cisa-warns-of-cwp-vulnerability-exploited-in-the-wild/ #Vulnerabilities #ControlWebPanel #exploited #CISAKEV #CWP

CISA Warns of CWP Vulnerability Exploited in the Wild https://www.securityweek.com/cisa-warns-of-cwp-vulnerability-exploited-in-the-wild/ #Vulnerabilities #ControlWebPanel #exploited #CISAKEV #CWP

CISA Warns of CWP Vulnerability Exploited in the Wild https://www.securityweek.com/cisa-warns-of-cwp-vulnerability-exploited-in-the-wild/ #Vulnerabilities #ControlWebPanel #exploited #CISAKEV #CWP

CISA Warns of CWP Vulnerability Exploited in the Wild https://www.securityweek.com/cisa-warns-of-cwp-vulnerability-exploited-in-the-wild/ #Vulnerabilities #ControlWebPanel #exploited #CISAKEV #CWP

CISA Adds Exploited XWiki, VMware Flaws to KEV Catalog https://www.securityweek.com/cisa-adds-exploited-xwiki-vmware-flaws-to-kev-catalog/ #Vulnerabilities #exploited #CISAKEV #VMware #XWiki

CISA Warns of Exploited DELMIA Factory Software Vulnerabilities https://www.securityweek.com/cisa-warns-of-exploited-delmia-factory-software-vulnerabilities/ #exploited #CISAKEV #ICS/OT #DELMIA #ICS #OT

CISA Warns of Exploited Apple, Kentico, Microsoft Vulnerabilities https://www.securityweek.com/cisa-warns-of-exploited-apple-kentico-microsoft-vulnerabilities/ #Vulnerabilities #exploited #CISAKEV #Kentico #Windows #Apple

CISA Warns of Exploited Apple, Kentico, Microsoft Vulnerabilities https://www.securityweek.com/cisa-warns-of-exploited-apple-kentico-microsoft-vulnerabilities/ #Vulnerabilities #exploited #CISAKEV #Kentico #Windows #Apple

CISA Warns of Exploited Apple, Kentico, Microsoft Vulnerabilities https://www.securityweek.com/cisa-warns-of-exploited-apple-kentico-microsoft-vulnerabilities/ #Vulnerabilities #exploited #CISAKEV #Kentico #Windows #Apple

CISA Warns of Exploited Apple, Kentico, Microsoft Vulnerabilities https://www.securityweek.com/cisa-warns-of-exploited-apple-kentico-microsoft-vulnerabilities/ #Vulnerabilities #exploited #CISAKEV #Kentico #Windows #Apple

CISA Confirms Exploitation of Latest Oracle EBS Vulnerability https://www.securityweek.com/cisa-confirms-exploitation-of-latest-oracle-ebs-vulnerability/ #OracleEBusinessSuite #Vulnerabilities #CVE202561884 #Oraclehack #exploited #Featured #CISAKEV

CISA Confirms Exploitation of Latest Oracle EBS Vulnerability https://www.securityweek.com/cisa-confirms-exploitation-of-latest-oracle-ebs-vulnerability/ #OracleEBusinessSuite #Vulnerabilities #CVE202561884 #Oraclehack #exploited #Featured #CISAKEV

CISA Confirms Exploitation of Latest Oracle EBS Vulnerability https://www.securityweek.com/cisa-confirms-exploitation-of-latest-oracle-ebs-vulnerability/ #OracleEBusinessSuite #Vulnerabilities #CVE202561884 #Oraclehack #exploited #Featured #CISAKEV

CISA Confirms Exploitation of Latest Oracle EBS Vulnerability https://www.securityweek.com/cisa-confirms-exploitation-of-latest-oracle-ebs-vulnerability/ #OracleEBusinessSuite #Vulnerabilities #CVE202561884 #Oraclehack #exploited #Featured #CISAKEV

Organizations Warned of Exploited Adobe AEM Forms Vulnerability https://www.securityweek.com/organizations-warned-of-exploited-adobe-aem-forms-vulnerability/ #Vulnerabilities #exploited #AEMForms #CISAKEV #Adobe

Organizations Warned of Exploited Meteobridge Vulnerability https://www.securityweek.com/organizations-warned-of-exploited-meteobridge-vulnerability/ #Vulnerabilities #vulnerability #Meteobridge #exploited #CISAKEV

Organizations Warned of Exploited Meteobridge Vulnerability https://www.securityweek.com/organizations-warned-of-exploited-meteobridge-vulnerability/ #Vulnerabilities #vulnerability #Meteobridge #exploited #CISAKEV

Organizations Warned of Exploited Sudo Vulnerability https://www.securityweek.com/organizations-warned-of-exploited-sudo-vulnerability/ #Vulnerabilities #exploited #CISAKEV #Sudo

Organizations Warned of Exploited Sudo Vulnerability https://www.securityweek.com/organizations-warned-of-exploited-sudo-vulnerability/ #Vulnerabilities #exploited #CISAKEV #Sudo

Organizations Warned of Exploited Git Vulnerability https://www.securityweek.com/organizations-warned-of-exploited-git-vulnerability/ #Vulnerabilities #exploited #CISAKEV #CISA #Git

Organizations Warned of Exploited Git Vulnerability https://www.securityweek.com/organizations-warned-of-exploited-git-vulnerability/ #Vulnerabilities #exploited #CISAKEV #CISA #Git

CISA Warns of Attacks Exploiting N-able Vulnerabilities – Source: www.securityweek.com https://ciso2ciso.com/cisa-warns-of-attacks-exploiting-n-able-vulnerabilities-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #Exploited #CISAKEV #Nable

CISA Warns of Attacks Exploiting N-able Vulnerabilities – Source: www.securityweek.com https://ciso2ciso.com/cisa-warns-of-attacks-exploiting-n-able-vulnerabilities-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #Exploited #CISAKEV #Nable

CISA Warns of Attacks Exploiting N-able Vulnerabilities – Source: www.securityweek.com https://ciso2ciso.com/cisa-warns-of-attacks-exploiting-n-able-vulnerabilities-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #Exploited #CISAKEV #Nable

CISA Warns of Attacks Exploiting N-able Vulnerabilities – Source: www.securityweek.com https://ciso2ciso.com/cisa-warns-of-attacks-exploiting-n-able-vulnerabilities-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #Exploited #CISAKEV #Nable

CISA Warns of Attacks Exploiting N-able Vulnerabilities https://www.securityweek.com/cisa-warns-of-attacks-exploiting-n-able-vulnerabilities/ #Vulnerabilities #exploited #CISAKEV #Nable

CISA Warns of Attacks Exploiting N-able Vulnerabilities https://www.securityweek.com/cisa-warns-of-attacks-exploiting-n-able-vulnerabilities/ #Vulnerabilities #exploited #CISAKEV #Nable

CISA Warns of Attacks Exploiting N-able Vulnerabilities https://www.securityweek.com/cisa-warns-of-attacks-exploiting-n-able-vulnerabilities/ #Vulnerabilities #exploited #CISAKEV #Nable

CISA Warns of Attacks Exploiting N-able Vulnerabilities https://www.securityweek.com/cisa-warns-of-attacks-exploiting-n-able-vulnerabilities/ #Vulnerabilities #exploited #CISAKEV #Nable

CISA Warns of Attacks Exploiting N-able Vulnerabilities https://www.securityweek.com/cisa-warns-of-attacks-exploiting-n-able-vulnerabilities/ #Vulnerabilities #exploited #CISAKEV #Nable