#vulnerabilitymanagement — Public Fediverse posts

Anthropic Overhauls Cyber Verification Program

Anthropic is shaking up its approach to cybersecurity with a major overhaul of its Cyber Verification Program, combining it with Project Glasswing to supercharge security efforts. The move follows a successful six-month trial that helped partners uncover over 129,000 verified software vulnerabilities.

https://osintsights.com/anthropic-overhauls-cyber-verification-program?utm_source=mastodon&utm_medium=social

#CyberVerificationProgram #VulnerabilityManagement #SoftwareSecurity #EmergingThreats #Anthropic

Your image scanner tells you what you shipped. It cannot tell you what the container runs now.

A scanner reads the image: the packages and binaries baked in when the build finished. That is the right question to ask.

https://primod.io/?utm_source=mastodon&utm_medium=social&utm_campaign=organic-social&utm_content=scan-describes-the-build&utm_term=tool-gap

#ContainerSecurity #VulnerabilityManagement #RuntimeSecurity

Weekly CVE report for Sept 28 - Oct 4, 2026: 2,652 new CVEs and seven exploited vulnerabilities in Cisco, FortiMail, MediaWiki and Citrix.

#WeeklyCVEReport #ExploitedVulnerabilities #CISAKEV #ZeroDay #PatchManagement #Cisco #FortiMail #VulnerabilityManagement

https://securityonline.info/weekly-cve-report-sept-28-oct-4-2026/?utm_source=mastodon&utm_medium=jetpack_social

Zammad security alert: session hijacking and remote code execution

CVE-2026-102489 concerns session hijacking that can lead to code execution as the Zammad service account on affected older installations. DIVD reports exploitation in a real incident.

Zammad states that version 7.0 and later are not exploitable through this issue and recommends upgrading to 7.2.0.

#Zammad #CyberSecurity #VulnerabilityManagement #SecPoint #Penetrator

We did some improvements in GCVE extension - GCVE BCP-05-X-03 - Vulnerability Handling and Disclosure Timeline.

We also review the alignment and interoperability with CSAF 2.1.

Now there is a new object field entities to represent the entities in the handling timeline.

🔗 GCVE BCP-05-X-03 https://gcve.eu/bcp/extension/gcve-bcp-05-x-03/
🔗 Commit with the changes to the extension https://github.com/gcve-eu/gcve.eu/commit/cec00b01c5b544b5f0aa7bd4d78e00bfddf87667

#csaf #gcve #cve #vulnerabilityManagement #vulnerability #openstandard #cra