Common Vulnerability Scoring System Stories

Global Stories

Common Vulnerability Scoring System stories

AI-generated cyber attacks to hit firms soon, warn experts

Many firms lack the capacity to fix existing flaws fast enough, leaving them exposed as AI-generated attacks scale up, experts warn.

By Joseph Gabriel Lagonsin • 6 min read • This month

Ransomware

Rapid7 says exploits are emerging faster than patches

Defenders face a shrinking window to act, after Rapid7 found 62% of newly exploited flaws could be attacked without authentication or user interaction.

By Sean Mitchell • 3 min read • Last month

Security Operations Centres

NIST seeks input to modernise vulnerability database

Security teams could gain more useful risk signals as NIST weighs changes to the National Vulnerability Database amid surging flaw volumes and AI use.

By Sean Mitchell • 5 min read • Last month

Firewalls

Asimily launches segmentation orchestration for devices

It aims to cut the manual work that leaves many connected-device networks exposed, by turning risk data into enforced policy automatically.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 3rd Jun 2026

Digital Transformation

CrowdStrike expands QuiltWorks with cyber insurers

Cyber insurers are now joining CrowdStrike's front-line AI risk framework as boards face faster exploit-to-loss cycles and tougher underwriting scrutiny.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 29th May 2026

Data Protection

Codific predicts nine key cybersecurity shifts for 2026

Codific sees 2026 cybersecurity shaped by shadow AI, passwordless logins, tighter regulation and a sharper focus on software supply chains.

By Shannon Williams • 6 min read • Wed, 24th Dec 2025

Cloud Security

DivisionHex launches new framework to streamline exposure management

DivisionHex launches a new framework leveraging Tenable One to help firms prioritise cyber exposure risks and improve security defence strategies.

By Sean Mitchell • 3 min read • Sat, 6th Dec 2025

Application Security

Study finds CVE security scores flawed, with third unsubstantiated

Nearly one-third of CVE entries are unverified, revealing flaws in how organisations assess software security risks and reliance on CVSS scores.

By Shannon Williams • 4 min read • Fri, 17th Oct 2025

Advanced Persistent Threat Protection

Tenable adds AI to VPR for sharper, real-time risk detection

Tenable's AI-enhanced Vulnerability Priority Rating sharply narrows focus to 1.6% of business-critical risks, boosting real-time threat detection and faster remediation.

By Melvin Hipolito • 3 min read • Mon, 28th Jul 2025

Advanced Persistent Threat Protection

Tenable boosts vulnerability priority rating with advanced AI

Tenable enhances its Vulnerability Priority Rating with AI, reducing critical cybersecurity threats focus to 1.6% for faster, smarter remediation.

By Catherine Knowles • 3 min read • Fri, 25th Jul 2025

DevOps

Azul boosts Java security with improved runtime vulnerability detection

Azul's Intelligence Cloud now cuts Java security false positives by up to 99%, using runtime data to boost vulnerability detection accuracy for DevOps teams.

By Catherine Knowles • 4 min read • Fri, 13th Jun 2025

DevOps

Azul unveils Java tool to cut false positives by up to 99%

Azul has launched a Java vulnerability tool that cuts false positives by up to 99%, improving threat detection accuracy for production environments.

By Melvin Hipolito • 4 min read • Wed, 11th Jun 2025

Semiconductors

Picus launches tool for real-time validation of exploitable risks

Picus Security launches Exposure Validation, a tool using real-time attack simulations to identify which vulnerabilities are truly exploitable in organisations.

By Catherine Knowles • 3 min read • Fri, 23rd May 2025

Security Information and Event Management

Datadog acquires Metaplane to boost AI & data observability

Datadog reveals updated DevSecOps report showing Java's vulnerabilities and announces Metaplane acquisition to boost data observability and AI monitoring.

By Sean Mitchell • 4 min read • Thu, 24th Apr 2025

Ransomware

Microsoft April Patch Tuesday highlights zero-day risks

Microsoft's recent Patch Tuesday sparked scrutiny with a 40-minute delay in updates and notable vulnerabilities, including a critical zero-day in the CLFS Driver.

By Shannon Williams • 3 min read • Fri, 11th Apr 2025

Digital Transformation

How to implement exposure management in complex cyber-physical systems

As digital transformation heightens cyber-physical connectivity, organisations must adopt effective exposure management strategies to safeguard critical systems.

By Leon Poggioli • 4 min read • Wed, 23rd Oct 2024

Risk & Compliance

Revenera unveils OSS Inspector plugin for IntelliJ IDEA users

Revenera launches OSS Inspector for IntelliJ IDEA, helping developers identify open source software risks directly in their IDE, ensuring secure, compliant code.

By Catherine Knowles • 3 min read • Thu, 5th Sep 2024