PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Vulnerability management reboot sought, CISOs more influential in boardroom, Trump’s cyber overhaul – OffSec roundup for CISOs

yeswehack.com | vulnerability | #ai-security | #vulnerability-management | #red-teaming | #cisa | #cve | #ciso | #genai
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CISO roundup: a study on what sucks in security, the CVE surge, CISOs' growing boardroom influence (82% now report to CEOs), CISA cutbacks, and lessons from red-teaming 100 genAI products.
Published
Collected

Related coverage

vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
research · bishopfox.com
Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research
CVE disclosures are up 85% while exploitation barely moved. Bishop Fox breaks down four Nginx CVEs that looked critical but rarely affect real deployments.
blog · jfrog.com
The Year the Vulnerability Backlog Changed Shape
AI coding tools are swelling vulnerability backlogs at machine speed. Discover how CISOs can adapt supply chain security and governance for the agentic era.
vulnerability · yeswehack.com
US House passes bill mandating vulnerability disclosure policies for federal contractors
The US House passed a bill mandating VDPs for federal contractors, consistent with NIST guidelines; the roundup also covers the UK Home Office's own vulnerability disclosure policy launch.
vulnerability · blog.quarkslab.com
Snapshotting our way to CVE-2026-9539
This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.
vulnerability · bishopfox.com
A Review of the 2021 CISA and MITRE Vulnerability Lists
A comparison of CISA's top 30 exploited vulnerabilities of 2020 and MITRE's top 25 dangerous weaknesses: origins, purposes, and bug types, plus takeaways for defenders' prioritization.
Back