menu

Recent posts tagged vulnerabilitymanagement

Level UI • 1 day • in Articles • 9 min read
An MCP server is not a new API. It is a thin layer over the one you already have
Somewhere in the last year, "do we need an MCP server?" joined the list of questions that arrive in a brief before anyone has said what the thing is for. It is usually framed as MCP vs API, as though the Model Context Protocol were a newer kind of AP...
post-cover-33074
  • ai
  • api
  • webdev
  • security
9 Reactions 7 Comments
Tom Smithverified • Sep 8 • in Articles • 4 min read
Finite State's Larry Pesce: Attackers Are Coming Back for Infrastructure Everyone Forgot to Watch
Over the past week, attackers have been hijacking MikroTik routers at scale, exploiting a chain of RouterOS vulnerabilities CERT Polska calls "MikroTrick." Two flaws, an SSH authentication bypass and a privilege escalation triggered by a specially cr...
post-cover-26526
  • networksecurity
  • cybersecurity
  • infosec
  • vulnerabilitymanagement
0 Reactions 0 Comments
temikara • Aug 26 • in Articles • 1 min read
From Zero Visibility to a Measurable Security Baseline
Every security team has a “Day Zero” the moment before security tooling, visibility, and processes are in place. You can't confidently answer questions like: • What devices are on the network? • Which systems are vulnerable? • Are our endpoints patc...
post-cover-25444
  • cybersecurity
  • vulnerabilitymanagement
  • patchmanagement
  • endpointsecurity
7 Reactions 2 Comments
Tom Smithverified • Aug 4 • in Articles • 4 min read
CVE Disclosures Have Doubled Two Years Running — And Now the Backlog Is "Radioactive"
"Vulnpocalypse" isn't a term Jeff Williams coined himself — he credits his marketing department — but the Contrast Security founder and OWASP creator uses it anyway, because it captures something real. Frontier AI models, Claude Mythos among them, ca...
post-cover-24117
  • appsec
  • cybersecurity
  • aisecurity
  • vulnerabilitymanagement
0 Reactions 0 Comments
Muhammad Ali Khan • Dec 27, 2025 • in Articles • 1 min read
Are You Ready for the 2026 OT Cyber Compliance Wave?
By Muhammad Ali ICS/ OT Cybersecurity Specialist — AAISM | CISSP | CISA | CISM | CEH | ISO27001 LI | CHFI | CGEIT | CDCP The clock is ticking. By 2026, industrial operators worldwide will face stricter OT cyber regulations. Fines, operational rest...
post-cover-8991
  • cybersecurity
  • cybersecurityjourney
  • vulnerabilitymanagement
  • securityarchitecture
6 Reactions 2 Comments
Muhammad Ali Khan • Dec 16, 2025 • in Articles • 3 min read
Operator Fatigue In OT Cyber Security
By ICS/ OT Cybersecurity Specialist Muhammad Ali - AAISM | CISSP | CISA | CISM | CEH | ISO27001 LI | CHFI | CGEIT | CDCP The reality of cyberattacks on factories, power plants, or pipelines is far more mundane and far more dangerous than we normally...
post-cover-8467
  • cybersecurity
  • ai
  • securityarchitecture
  • vulnerabilitymanagement
6 Reactions 2 Comments
Muhammad Ali Khan • Dec 16, 2025 • in Articles • 3 min read
Attackers Know Your Human Patterns Better Than You Do
By ICS/ OT Cybersecurity Specialist Muhammad Ali - AAISM | CISSP | CISA | CISM | CEH | ISO27001 LI | CHFI | CGEIT | CDCP Let us face it. Your operators are predictable. This is not because they lack skill or because they do not care. It is simply b...
post-cover-8466
  • ai
  • cybersecurity
  • vulnerabilitymanagement
  • web-architecture
8 Reactions 4 Comments
Carrie • Dec 4, 2025 • in Articles • 2 min read
Ultimate Guide to Handle React/Next.js RCE (CVE-2025–55182)
A Critical Front-End Vulnerability Hits Hard On December 4, 2025, developers worldwide woke up to a CVSS 10.0 full-score RCE vulnerability in React 19 / Next.js CVE-2025-55182, Next.js CVE-2025-66478. If Log4Shell was a nightmare for Java in 2021...
  • react
  • nextjs
  • vulnerabilitymanagement
  • websecurity
7 Reactions 1 Comments
Tom Smithverified • 1 day • in Articles • 9 min read
Developer Weekly Briefing — October 30, 2026
Security dominated this week, but not in the usual way. Two active campaigns turned GitHub configuration files into attack surfaces. Researchers demonstrated that the built-in browsers inside AI coding tools can read your SSH keys. And at Oracle AI ...
post-cover-33104
  • agenticai
  • devsecops
  • github
  • localai
6 Reactions 3 Comments
Tom Smithverified • Sep 17, 2025 • in Articles • 4 min read
CrowdStrike AI agents reverse engineer malware and prioritize patches without human intervention.
CrowdStrike's Threat AI and Risk-Based Patching: Autonomous Security at Machine Speed CrowdStrike deploys AI agents that reverse engineer malware and prioritize patches without human intervention. CrowdStrike announced two capabilities that fundam...
post-cover-5445
  • threatai
  • cybersecurity
  • malwareanalysis
  • vulnerabilitymanagement
3 Reactions 1 Comments
Tom Smithverified • Jul 17, 2025 • in Articles • 5 min read
Devs fix only 6 vulnerabilities monthly while facing 17 new ones - production attack data essential.
Software Under Siege: Why Production Data is the Key to Secure Code The numbers are staggering and sobering: applications face attacks every three minutes, with defenders taking 84 days to patch critical vulnerabilities while attackers exploit them...
  • applicationsecurity
  • devsecops
  • cybersecurity
  • vulnerabilitymanagement
4 Reactions 1 Comments
To see more, click for the full list of posts or popular tags.
chevron_left
🔥 9 posts • 👩‍💻 4 active writers
✨ Want to write in this topic?
Share your learning. Get discovered. Build your profile.
Join CoderLegion
💡 Why developers use CoderLegion
Track learning • Share posts • Get ranked publicly
Create your profile