SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Common Vulnerability Scoring System Stories

American Stories

Common Vulnerability Scoring System stories

Global Stories

Common Vulnerability Scoring System stories

Rapid7 says exploits are emerging faster than patches
Ransomware

Rapid7 says exploits are emerging faster than patches

Defenders face a shrinking window to act, after Rapid7 found 62% of newly exploited flaws could be attacked without authentication or user interaction.

By Sean Mitchell • 3 min read • Last month
NIST seeks input to modernise vulnerability database
Security Operations Centres

NIST seeks input to modernise vulnerability database

Security teams could gain more useful risk signals as NIST weighs changes to the National Vulnerability Database amid surging flaw volumes and AI use.

By Sean Mitchell • 5 min read • Last month
Asimily launches segmentation orchestration for devices
Firewalls

Asimily launches segmentation orchestration for devices

It aims to cut the manual work that leaves many connected-device networks exposed, by turning risk data into enforced policy automatically.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 3rd Jun 2026
CrowdStrike expands QuiltWorks with cyber insurers
Digital Transformation

CrowdStrike expands QuiltWorks with cyber insurers

Cyber insurers are now joining CrowdStrike's front-line AI risk framework as boards face faster exploit-to-loss cycles and tougher underwriting scrutiny.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 29th May 2026
Codific predicts nine key cybersecurity shifts for 2026
Data Protection

Codific predicts nine key cybersecurity shifts for 2026

Codific sees 2026 cybersecurity shaped by shadow AI, passwordless logins, tighter regulation and a sharper focus on software supply chains.

By Shannon Williams • 6 min read • Wed, 24th Dec 2025
DivisionHex launches new framework to streamline exposure management
Cloud Security

DivisionHex launches new framework to streamline exposure management

DivisionHex launches a new framework leveraging Tenable One to help firms prioritise cyber exposure risks and improve security defence strategies.

By Sean Mitchell • 3 min read • Sat, 6th Dec 2025
Study finds CVE security scores flawed, with third unsubstantiated
Application Security

Study finds CVE security scores flawed, with third unsubstantiated

Nearly one-third of CVE entries are unverified, revealing flaws in how organisations assess software security risks and reliance on CVSS scores.

By Shannon Williams • 4 min read • Fri, 17th Oct 2025
Tenable adds AI to VPR for sharper, real-time risk detection
Advanced Persistent Threat Protection

Tenable adds AI to VPR for sharper, real-time risk detection

Tenable's AI-enhanced Vulnerability Priority Rating sharply narrows focus to 1.6% of business-critical risks, boosting real-time threat detection and faster remediation.

By Melvin Hipolito • 3 min read • Mon, 28th Jul 2025
Tenable boosts vulnerability priority rating with advanced AI
Advanced Persistent Threat Protection

Tenable boosts vulnerability priority rating with advanced AI

Tenable enhances its Vulnerability Priority Rating with AI, reducing critical cybersecurity threats focus to 1.6% for faster, smarter remediation.

By Catherine Knowles • 3 min read • Fri, 25th Jul 2025
Azul boosts Java security with improved runtime vulnerability detection
DevOps

Azul boosts Java security with improved runtime vulnerability detection

Azul's Intelligence Cloud now cuts Java security false positives by up to 99%, using runtime data to boost vulnerability detection accuracy for DevOps teams.

By Catherine Knowles • 4 min read • Fri, 13th Jun 2025
Azul unveils Java tool to cut false positives by up to 99%
DevOps

Azul unveils Java tool to cut false positives by up to 99%

Azul has launched a Java vulnerability tool that cuts false positives by up to 99%, improving threat detection accuracy for production environments.

By Melvin Hipolito • 4 min read • Wed, 11th Jun 2025
Picus launches tool for real-time validation of exploitable risks
Semiconductors

Picus launches tool for real-time validation of exploitable risks

Picus Security launches Exposure Validation, a tool using real-time attack simulations to identify which vulnerabilities are truly exploitable in organisations.

By Catherine Knowles • 3 min read • Fri, 23rd May 2025
Datadog acquires Metaplane to boost AI & data observability
Security Information and Event Management

Datadog acquires Metaplane to boost AI & data observability

Datadog reveals updated DevSecOps report showing Java's vulnerabilities and announces Metaplane acquisition to boost data observability and AI monitoring.

By Sean Mitchell • 4 min read • Thu, 24th Apr 2025
Microsoft April Patch Tuesday highlights zero-day risks
Ransomware

Microsoft April Patch Tuesday highlights zero-day risks

Microsoft's recent Patch Tuesday sparked scrutiny with a 40-minute delay in updates and notable vulnerabilities, including a critical zero-day in the CLFS Driver.

By Shannon Williams • 3 min read • Fri, 11th Apr 2025
How to implement exposure management in complex cyber-physical systems
Digital Transformation

How to implement exposure management in complex cyber-physical systems

As digital transformation heightens cyber-physical connectivity, organisations must adopt effective exposure management strategies to safeguard critical systems.

By Leon Poggioli • 4 min read • Wed, 23rd Oct 2024
Revenera unveils OSS Inspector plugin for IntelliJ IDEA users
Risk & Compliance

Revenera unveils OSS Inspector plugin for IntelliJ IDEA users

Revenera launches OSS Inspector for IntelliJ IDEA, helping developers identify open source software risks directly in their IDE, ensuring secure, compliant code.

By Catherine Knowles • 3 min read • Thu, 5th Sep 2024

Stories from Other Regions

Common Vulnerability Scoring System stories

Orro launches AI CTEM service for Australian firms
Cloud Security

Orro launches AI CTEM service for Australian firms

Australian security teams are under pressure to prioritise fixes as attacks surge and exploited vulnerabilities can now be used within five days.

By Sean Mitchell • 4 min read • Wed, 15th Apr 2026