Quantifying the public vulnerability market: 2022 edition
An analysis of vulnerability disclosures, impact severity, and product analysis
-
Know your Microsoft 365 data, trust your recoveryHow contextual intelligence helps IT teams reduce ROT, protect sensitive content, and govern AI access
-
Five ways CISOs can use ‘dark AI’ to their own advantageIn-Depth Vulnerability discovery will explode over the next few years, but CIOs can use AI to beat hackers at their own game
-
A quarter of security vulnerabilities are never fully fixed – and AI is compounding the problemNews A new study warns against delegating flaw fixes to AI when human staff are still struggling to understand what's wrong
-
Hackers are using patches to create vulnerability ‘maps’ – that means the 'patch and move on' approach needs to endNews Terra Security has spotted a leap in vulnerabilities in patches or otherwise fixed code
-
‘The economics of vulnerability discovery have changed’: NIST wants to modernize the National Vulnerability Database amid AI advances – cyber experts say it needs to be redesigned with machine-speed in mind
News The National Vulnerability Database was designed for human-speed. Advances in AI mean it needs a much-needed overhaul
-
OpenAI expands 'Daybreak' cyber program: New tools, partnerships, and a cyber-focused GPT-5.5 aim to help 'patch the world'News The company has added new tools, signed up partners, and released its GPT-5.5-Cyber model more widely
-
AI is shrinking attack windows, and it’s forcing a complete rethink of cyber resilience – here’s how organizations can prepareNews Commvault has urged companies to improve their business continuity and resilience plans in the face of flaws spotted by AI
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Anthropic targets vulnerability detection gains with Claude Security public beta — here's what users can expectNews The Claude Mythos developer is aiming for a more limited approach to cyber tooling for public consumption
-
Researchers warn millions of RDP and VNC servers are wide open to exploitationNews Researchers at Forescout spotted millions of RDP and VNC servers exposed online
