#vulnmanagement — Public Fediverse posts

New by me: Cybersecurity Weekly Roundup (Jan 17–24, 2026)

This week’s theme is basically: the edge is lava. Cisco UC gets patched under active exploitation, Fortinet SSO abuse turns into rogue admins, GitLab fixes a 2FA bypass, Zoom patches a critical RCE path, and telnetd reminds us why legacy services deserve the void.

I also added a quick Reality Check section at the end so you can sanity-check patching, logging, and “patched vs. clean” in one glance.

https://www.kylereddoch.me/blog/cybersecurity-weekly-roundup-january-17-24-2026/

#Cybersecurity #InfoSec #VulnManagement #ThreatIntel #BlueTeam #Ransomware

Back in the saddle with my Cybersecurity Weekly Roundup for 2026.

This week’s signal: CISA moves (KEV + retired Emergency Directives), critical patching for Veeam/Trend Micro/n8n/Cisco ISE, legacy edge gear still getting farmed, “internal-looking” phishing tricks, and malicious browser extensions stealing AI chats.

15 stories, quick briefs, and my practitioner take:
https://www.kylereddoch.me/blog/cybersecurity-weekly-roundup-january-2-9-2026/

#Cybersecurity #InfoSec #VulnManagement #ThreatIntel #Ransomware #BlueTeam #CybersecurityWeeklyRoundup #CybersecKyle

Ever wish your vulnerability scanner could tell you what's really exploitable? Grype now includes CISA KEV & EPSS data, plus powerful vuln-db search! Prioritize smarter. 🎯 #Grype #Cybersecurity #VulnManagement
https://anchore.com/blog/time-to-take-another-look-at-grype-a-year-of-major-improvements/

Want to speak at #VulnCon2025 ? Apply today! The #CFP closes January 15, 2025. Learn more at: https://go.first.org/xjTt6 #vulnmanagement #CVEProgram #VulnerabilityMetadata #ManagingRisk #PSIRT #VEX #SupplyChainSecurity #VulnIdentifiers

Want to speak at #VulnCon2025 ? Apply today! The #CFP closes January 15, 2025. Learn more at: https://go.first.org/xjTt6 #vulnmanagement #CVEProgram #VulnerabilityMetadata #ManagingRisk #PSIRT #VEX #SupplyChainSecurity #VulnIdentifiers

Want to speak at #VulnCon2025 ? Apply today! The #CFP closes January 15, 2025. Learn more at: https://go.first.org/xjTt6 #vulnmanagement #CVEProgram #VulnerabilityMetadata #ManagingRisk #PSIRT #VEX #SupplyChainSecurity #VulnIdentifiers

Want to speak at #VulnCon2025 ? Apply today! The #CFP closes January 15, 2025. Learn more at: https://go.first.org/xjTt6 #vulnmanagement #CVEProgram #VulnerabilityMetadata #ManagingRisk #PSIRT #VEX #SupplyChainSecurity #VulnIdentifiers

Want to speak at #VulnCon2025 ? Apply today! The #CFP closes January 15, 2025. Learn more at: https://www.first.org/conference/vulncon2025/cfp #vulnmanagement #CVEProgram #VulnerabilityMetadata #ManagingRisk #PSIRT #VEX #SupplyChainSecurity #VulnIdentifiers

CISA BOD 23-01 released new compliance requirements regarding asset inventory and vulnerability management. Federal agencies must comply with this directive by April 2023, but all organizations are encouraged to incorporate the guidelines to strengthen the foundations of their security posture.

How can you achieve compliance? Check out our blog for an overview of the new directive, and steps to meet (or even exceed!) the requirements:

https://www.runzero.com/blog/cisa-bod-23-01/?utm_source=mastodon&utm_medium=social&utm_campaign=cisabod1

#networksecurity #vulnmanagement #assetinventory #itcompliance