A practitioner runbook for when a vendor that holds your data is breached: triage, scoping, containment, the notification ...
Which metrics a third-party risk management program can defend to a board or regulator: coverage, timeliness, evidence ...
DigiCert says its Certificate Authority (CA) services, CertCentral, and DigiCert ONE were unaffected by unauthorized access to an internal archive business system. Customer login credentials and ...
A hub for the capabilities behind modern third-party risk management - continuous monitoring, attack surface monitoring, ...
What FedRAMP requires when a cloud service provider is in a federal agency's supply chain: the FedRAMP Authorization Act (44 ...
The November 2026 Android Security Bulletin (Android Security Bulletin—November 2026) lists 216 CVEs: 23 rated Critical and 193 rated High. In Google's words, the most severe is "a critical security ...
NVD CVSS 3.1: 5.5 (Medium) | CVE: CVE-2024-27834 | CISA KEV: listed 4 Nov 2026 (due 18 Nov) | Fixed: 13 May 2024 On 4 November 2026 CISA added CVE-2024-27834, a WebKit flaw in Apple platforms, to its ...
CVE-2026-110447 is an unauthenticated OS command injection in Collabora Online - Built-in CODE Server, an optional Nextcloud app with the package name richdocumentscode. Collabora's advisory says a ...
ManageEngine product advisory calls the issue High. CNA (Zohocorp) CVSS 3.1: 9.1 Critical (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). CVE: CVE-2026-13594. Fixed ...
On 27 October 2026, TeamViewer published security bulletin TV-2026-1011, fixing three flaws in its clients. The most broadly relevant is CVE-2026-111585, an integer overflow in the code that processes ...
SolarWinds published an advisory on 3 November 2026 for CVE-2026-28336, a command injection vulnerability in SolarWinds Dameware, its remote-support and remote-control product. SolarWinds rates it ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results