Vulnerability scanning helps organizations probe for threats across their entire IT infrastructures, from software and specialized devices to files and databases. Types of vulnerability scanning vary, ...

Vuls is an open-source tool that helps users find and manage security vulnerabilities. It was created to solve the daily problems admins face when trying to keep servers secure. Many administrators ...

A backlog is a measure of unresolved ownership, not a measure of technical debt. Think about what has to be true for one ...

“OSV.dev allows all the different open source ecosystems and vulnerability databases to publish and consume information in one simple, precise, and machine readable format,” explained Rex Pan, a ...

Google has announced the availability of OSV-Scanner, a free tool that acts as a front end interface to the Open Source Vulnerability (OSV) database. The OSV-Scanner assesses a project's dependencies ...

A critical vulnerability was recently discovered in Imunify360 AV, a security scanner used by web hosting companies to protect over 56 million websites. An advisory by cybersecurity company Patchstack ...

Google has announced a new tool designed to help identify vulnerabilities in open source software. The OSV-Scanner is described as a frontend to the existing OSV (open source vulnerabilities) database ...

Modern vulnerability management programs require a strategy that defines what success means for your organization’s cybersecurity goals. By incorporating a few simple cyber hygiene routines to your ...

Almost half of all companies have internal databases with known vulnerabilities, with the average vulnerable database having 26 publicly disclosed flaws – more than half of which are critical or ...

IT security terminology and acronyms are bandied about at a furious rate -- so much so that the use of several terms throughout the course of a typical cybersecurity conversation could end up sounding ...

Security leaders have invested heavily in vulnerability management programs. Scanners are running. SBOMs are being generated. Dashboards are showing numbers. And yet, most programs are operating on a ...

Alex Smolen discusses dealing with security vulnerabilities both in the main product and the security scanner used to analyze it. First, I want to talk about where I work and what I work on so that I ...