ICS Advisory Project ICS Advisory Project The ICS Advisory Project is an open-source project that provides the Critical Infrastructure Security Agency (CISA) ICS Advisories, visualized as a Dashboard and in Comma-Separat...

ICS[AP] Dashboards are updated with the 4 CISA Advisories released on 3/26/26:

WAGO: 1 New
OpenCode Systems: 1 New
PTC: 1 New
Honeywell: 1 Update

www.icsadvisoryproject.com
#icssecurity
#otsecurity
#vulnerabilitymanagement

GitHub - icsadvprj/ICS-Advisory-Project: The ICS Advisory Project is an open-source project to provide CISA ICS Advisories data in Comma Separated Value (CSV) format to support vulnerability analysis ... The ICS Advisory Project is an open-source project to provide CISA ICS Advisories data in Comma Separated Value (CSV) format to support vulnerability analysis for the ICS/OT community. This is a co...

ICS[AP] updated CISA ICS Advisories Master File for 3/26/26 & the following year's CSVs:

CISA_ICS_ADV_2026_3_26.csv

Available @ ICS[AP] GitHub:
github.com/icsadvprj/IC...

#opensource
#vulnerabilitymanagement
#icssecurity

After Funding Jolt, EU Moves to Back the CVE Vulnerability System The European Union, through ENISA, is moving to bolster and diversify support for the Common Vulnerabilities and Exposures (CVE) program after a contracting scare involving MITRE exposed reliance on a single U.S. government contract. Lawmakers and industry experts are pushing for clearer governance, continuity measures, and higher-quality, machine-readable vulnerability records to...

The EU, via ENISA, moves to strengthen and diversify support for the CVE system after dependency on a single U.S. contract was exposed. Focus on governance, continuity, and AI-driven attack resilience grows. #CVEProgram #EU #VulnerabilityManagement

The CVE program averted a funding emergency, but the crises of the last few years—like the NVD stopping work in 2024 and the 2025 funding scare—have eroded trust in the existing system.... anchore.com/blog/cve-is-saved-but-th...

#Cybersecurity #VulnerabilityManagement #CVE #NVD

We Speak CVE Podcast, Episode 30, “CVE Record Disputes Explained”

We Speak CVE Podcast episode 30 now available!
“CVE Record Disputes Explained”
youtu.be/8pZrGj5QCLU

#cve #vulnerability #vulnerabilitymanagement #vulnerabilityintelligence #cybersecurity

Nucleus Nucleus is a Risk Based Vulnerability Management (RBVM) solution that automates vulnerability management processes and workflows, enabling organizations to mitigate vulnerabilities 10 times faster.

The latest update for #NucleusSecurity includes "The 9 Essential Requirements for an Enterprise Vulnerability Management System" and "Why More #AI Doesn't Guarantee Better #VulnerabilityManagement Outcomes".

#Cybersecurity #Compliance https://opsmtrs.com/4403ecn

SafeAeon SafeAeon leads the industry as a top-tier Cybersecurity-as-a-Service provider, delivering 24x7 premium Managed Security Services with AI-powered and human-driven 24x7 SOC, cutting-edge technology, and cost-e

The latest update for #SafeAeon includes "#VulnerabilityManagement as a Service: What Businesses Need to Know" and "Proactive Threat Management Strategies for Modern #Cybersecurity".

#MDR #PenTesting #Compliance https://opsmtrs.com/3YezO99

Urgent: Citrix urges immediate patching of critical NetScaler vulnerabilities amid active exploitation. Protect your systems now! #CyberSecurity #Citrix #NetScaler #VulnerabilityManagement Link: thedailytechfeed.com/citrix-urges...

BaseFortify | Vulnerability Management That Focuses on Real Risk BaseFortify helps you identify, prioritize, and understand vulnerabilities that matter. Clear CVE insights, attack context, and actionable guidance.

🛡️ With BaseFortify, you can map systems like:

cpe:2.3:o:apple:macos:14.8.5:*:*:*:*:*:*:*

and instantly see related vulnerabilities.

Know your exposure. Prioritize fixes.

✅ Free registration available

basefortify.eu

#BaseFortify #VulnerabilityManagement #CyberDefense

Original post on infosec.exchange

VulnMCP is an MCP server built with FastMCP that provides AI clients, chat agents, and other automated systems with tools for vulnerability management. It offers modular "skills" that can be easily extended or integrated, enabling intelligent analysis and automated insights on software […]

ICS[AP] Dashboards are updated with the 5 CISA Advisories released on 3/24/26:

Grassroots: 1 New
Pharos Controls: 1 New
Schneider Electric: 2 New
WHILL Inc.: 1 Update

www.icsadvisoryproject.com
#icssecurity
#otsecurity
#vulnerabilitymanagement

GitHub - icsadvprj/ICS-Advisory-Project: The ICS Advisory Project is an open-source project to provide CISA ICS Advisories data in Comma Separated Value (CSV) format to support vulnerability analysis ... The ICS Advisory Project is an open-source project to provide CISA ICS Advisories data in Comma Separated Value (CSV) format to support vulnerability analysis for the ICS/OT community. This is a co...

ICS[AP] updated CISA ICS Advisories Master File for 3/24/26 & the following year's CSVs:

CISA_ICS_ADV_2026_3_24.csv
CISA_ICS_ADV_2025_3_24_26.csv

Available @ ICS[AP] GitHub:
github.com/icsadvprj/IC...

#opensource
#vulnerabilitymanagement
#icssecurity

CVE Blog

New on the CVE Blog:
“Supplier ADP Pilot” — CVE Program to Explore Benefits of Supporting VEX-like, Product Status Information in Upstream CVE Records

medium.com/@cve_program...

#cve #vulnerability #vulnerabilitymanagement #infosec #cybersecurity

New CVE Program Partner

Cribl is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities identified in Cribl products

cve.org/Media/News/i...

#cve #cna #vulnerability #vulnerabilitymanagement #informationsecuroty #infosec #cybersecurity

Open-source AI pentesting tools are getting uncomfortably good - Help Net Security Open-source AI pentesting tools like BugTrace-AI, Shannon, and CAI mimic human testers, blending recon, exploits, and automation.

Here's a great article re AI Pentesting tools :

buff.ly/LUWZtAk

Need help with pentesting? Contact us at securicore.ca

#CyberSecurity #PenTesting #OpenSource #AI #AppSec #SecurityTesting #VulnerabilityManagement

SPARK Matrix?: Security Analytics and Automation, Q4 2025 QKS Group’s Security Analytics and Automation market research includes a detailed analysis of the gl...

How Security Analytics and Automation Are Shaping Enterprise Security in 2026

qksgroup.com/market-resea...

#SecurityAnalytics #SecurityAutomation #Cybersecurity #ThreatDetection #SOAR #UEBA #VulnerabilityManagement #CyberRiskManagement #SecurityOrchestration

Oracle Patches Critical Identity RCE
Read More: buff.ly/SRyprxy

#OracleSecurity #CVE202621992 #RemoteCodeExecution #IdentitySecurity #PatchNow #VulnerabilityManagement #EnterpriseSecurity #InfosecAlert

🛡️ BaseFortify helps you identify where vulnerable tools like Trivy are used across your environment.

Map components, detect exposure, and prioritize remediation faster when incidents hit.

Visibility = faster response.

#BaseFortify #CyberDefense #VulnerabilityManagement #SecurityTools

CISA adds critical vulnerabilities in Apple, Craft CMS, and Laravel Livewire to KEV catalog. Agencies must patch by April 3, 2026. Stay secure! #PotatoSecurity #CISA #VulnerabilityManagement Link: thedailytechfeed.com/cisa-urges-a...

CISA adds critical vulnerabilities in Apple, Craft CMS, and Laravel Livewire to KEV catalog. Agencies must patch by April 3, 2026. Stay secure! #CyberSecurity #CISA #VulnerabilityManagement Link: thedailytechfeed.com/cisa-urges-a...

Original post on infosec.exchange

cpe-guesser 2.0 released - Multi-Source CPE Imports, Better Ranking, and Greater Autonomy Beyond NVD

Version 2.0 brings major improvements to CPE import, ranking, and CVE v5 data handling. This release focuses on better import performance, broader format support, improved search relevance, and […]

Critical #Langflow vulnerability CVE-2026-33017 exploited within 20 hours of disclosure. Immediate action required to mitigate risk. #CyberSecurity #InfoSec #VulnerabilityManagement Link: thedailytechfeed.com/langflow-cve...

Original post on infosec.exchange

gcve-eu-kev updated — a CISA KEV and ENISA CNW/EUVD to GCVE BCP-07 converter.

It now also includes a generic RSS/Atom exporter for any GCVE KEV BCP-07 feed.

@gcve

#cybersecurity #gcve #kev #cve #vulnerability #vulnerabilitymanagement

🔗 https://github.com/gcve-eu/gcve-eu-kev
🔗 […]

Cisa Warns Of Zimbra, Cisco Zero-Day
Read More: buff.ly/8Scc2Er

#CISAKEV #Zimbra #CiscoZeroDay #SharePoint #ActivelyExploited #PatchNow #RCE #VulnerabilityManagement

ICS[AP] Dashboards are updated with the 8 CISA Advisories released on 3/19/26:

Schneider Electric: 4 New
Mitsubishi Electric: 1 New
CTEK: 1 New
IGL-Technologies: 1 New
Automated Logic: 1 New

www.icsadvisoryproject.com
#icssecurity
#otsecurity
#vulnerabilitymanagement

GitHub - icsadvprj/ICS-Advisory-Project: The ICS Advisory Project is an open-source project to provide CISA ICS Advisories data in Comma Separated Value (CSV) format to support vulnerability analysis ... The ICS Advisory Project is an open-source project to provide CISA ICS Advisories data in Comma Separated Value (CSV) format to support vulnerability analysis for the ICS/OT community. This is a co...

ICS[AP] updated CISA ICS Advisories Master File for 3/19/26 & the following year's CSVs:

CISA_ICS_ADV_2026_3_19.csv

Available @ ICS[AP] GitHub:
github.com/icsadvprj/IC...

#opensource
#vulnerabilitymanagement
#icssecurity

Nucleus Nucleus is a Risk Based Vulnerability Management (RBVM) solution that automates vulnerability management processes and workflows, enabling organizations to mitigate vulnerabilities 10 times faster.

The latest update for #NucleusSecurity includes "Why More #AI Doesn't Guarantee Better #VulnerabilityManagement Outcomes" and "Exposure Assessment Platforms Are Here and They're a Big Part of Successful CTEM".

#Cybersecurity #Compliance https://opsmtrs.com/4403ecn

ICS[AP] Dashboards are updated with the 6 CISA Advisories released on 3/17/26:

FESTO, CODESYS: 1 New | 1 KEV Match
Schneider Electric: 2 New | 1 Update
Siemens: 1 New
Hitachi Energy: 1 Update

www.icsadvisoryproject.com
#icssecurity
#otsecurity
#vulnerabilitymanagement

GitHub - icsadvprj/ICS-Advisory-Project: The ICS Advisory Project is an open-source project to provide CISA ICS Advisories data in Comma Separated Value (CSV) format to support vulnerability analysis ... The ICS Advisory Project is an open-source project to provide CISA ICS Advisories data in Comma Separated Value (CSV) format to support vulnerability analysis for the ICS/OT community. This is a co...

ICS[AP] updated CISA ICS Advisories Master File for 3/17/26 & the following year's CSVs:

CISA_ICS_ADV_2026_3_17.csv
CISA_ICS_ADV_2025_3_17_26.csv

Available @ ICS[AP] GitHub:
github.com/icsadvprj/IC...

#opensource
#vulnerabilitymanagement
#icssecurity

New CVE Program Partner

Bombadil Systems is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities in third-party software discovered by Bombadil Systems that are not in another CNA’s scope

cve.org/Media/News/i...

#cve #cna #vulnerability #vulnerabilitymanagement