Infosecurity Magazine

Risk and Vulnerability Assessment News

Scroll down for the latest risk and vulnerability assessment news and information.

Latest News and Features

Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities

News

Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports

News

Microsoft: AI Cuts Post-Compromise Attack Time to Minutes

News

Microsoft has warned that threat actors have gained the advantage over defenders by using AI to enhance the speed and scale of attacks

AI-Found Vulnerabilities More Likely to Enable RCE, Google Says

News

When Security and Sustainability Report to the Same Boardroom

Blog

Why is information security becoming an essential part of the sustainability and governance conversation?

Kiteworks Urges Customers to Restart Systems After Shutdown Notice

News

Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk

News

The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration

CISA Unveils Election Security Plan Ahead of 2026 Midterms

News

CISA Charts New "Quality Era" for Global CVE Program

News

CISA Upgrades Vulnerability Reporting Platform with More Automation

News

Webinars Coming Up

What to Fix First: A Practical Guide to Risk-Based Remediation

White Papers

Gcore Radar: DDoS Attack Trends Q3 to Q4, 2023

White Paper

Steps to Get Ahead of Insider Threats

White Paper

Financial Sector Quarterly Threat Landscape

White Paper

On-Demand Webinars

  • How to Manage Enterprise Cyber Resilience in the Age of AI
  • How To Enhance Security Operations with AI-Powered Defenses
  • OT Security Ecosystem for Targeted Risk Reduction and Reporting
  • How to Implement Attack Surface Management in the AI and Cloud Age
  • Auditing AI Risk: Essential Strategies for IT & Compliance Leaders
  • Navigating Exposures in Energy ICS Environments
  • How to Proactively Remediate Rising Web Application Threats
  • How to Optimize Third-Party Risk Management Programs Through NIST CSF 2.0
  • Experiencing a DDoS Simulation to Enhance Defenses
  • How Can the Boardroom Boost Cyber Resilience?

Podcasts

  • Exclusive Interview with OpenClaw's Security Advisor
  • How 2025 Shaped the Future of Cybersecurity
  • Can AI Solve the Vulnerability Problem in Critical Infrastructure?
  • Into Security Podcast - Episode 15

More news and features

Cisco Warns of Active Exploitation of Critical ISE Flaw

News

CRA Reporting Rules Take Effect: How to Ensure Your Organization is Ready

News Feature

Compliance with the new CRA reporting rules, which take effect from September 11, will require significant preparation work

Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026

News

N-able Releases Hotfix for Critical Remote Code Execution Vulnerability

News

How Industry Coalitions Are Rallying to Secure Open Source Software for the AI Era

News Feature

Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns

News

CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products

News

Australia Warns of Active Exploitation of Critical TeamCity Server Flaw

News

Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government

US Defense Contractors Admit Their Rising CMMC Scores May Not Be Accurate

News

Exclusive: Linux Foundation's Akrites to Go Live in September

News

The Linux Foundation's Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerability reports for open-source projects

Blogs

Your Service Desk Agents Can’t Out-Talk an AI

Blog

From Shadow AI to Accountable Agents: Why Agent Governance Needs Enforcement

Blog

Next-Gen Infosec

How to Prevent Data Leakages

Next-Gen

Top Cloud Misconceptions that Could Damage Your Organization

Next-Gen

Improve Asset Visibility in OT Security With Hybrid AI-Cloud Approaches

Next-Gen