This past November, the European Union Agency for Cybersecurity (ENISA) released its NIS Investments Report 2023, a rundown of how critical EU operators have been investing in cybersecurity pursuant to the NIS Directive. It not only covers how dollars have been spent, but suggest how they ought to be going forward. One particular point of emphasis? Vulnerability management. Vulnerability...

What is Chaos Testing?Application chaos testing does its best to counteract Murphy’s Law, where anything that can go wrong will go wrong, and at the worst possible time.Chaos testing and engineering is a proactive test methodology that identifies system errors prone to misuse before they can cause damage and security concerns for an application. This style of testing was developed and made...

Fortra VM will include the Microsoft Patch Tuesday checks in the NIRV 4.32.0 and Agent 2.2 releases.Microsoft addressed 33 vulnerabilities in this release, including 4 rated as Critical and 8 Remote Code Execution vulnerabilities.CVE/AdvisoryTitleTagMicrosoft Severity RatingBase ScoreMicrosoft ImpactExploitedPublicly DisclosedCVE-2023-36696Windows Cloud Files Mini Filter Driver Elevation of...

“Vulnerability Management” can be a security term that carries a lot of unnecessary weight. The irony is that the right vulnerability management (VM) solutions can actually take the weight off – your security team, your organization, and your other assets. Understanding how means debunking some of the more popular myths around this topic and discovering the truth behind one of security’s most...

Fortra VM will include these Microsoft Patch Tuesday checks in the NIRV 4.31.0 and Agent 2.1 releases. Microsoft addressed 58 vulnerabilities in this release, including 3 rated as Critical and 15 Remote Code Execution vulnerabilities. This release includes three vulnerabilities that have been exploited in the wild along with three vulnerabilities that have been publicly disclosed before Patch...

Vulnerability Management may not be the most glamorous aspect of cybersecurity. But just like car insurance, brushing your teeth, and yearly physicals – it is absolutely vital to catching problems before it’s too late. It’s no secret that many companies struggle for resources, especially their security departments. And some unfortunately decide to skip security fundamentals that don’t include...