Topic
Vulnerability Management
29 published works
ComplexDiscovery
SharePoint attackers are stealing the keys, and patching alone will not evict them
By Rob Robinson
Editor’s Note: Four actively exploited SharePoint Server vulnerabilities, a record 622-CVE Patch Tuesday and a federal remediation deadline landing today converge on one uncomfortable fact: attackers who steal IIS machine…
Inside Government Contracts
CISA Releases Binding Operational Directive on Prioritizing Security Updates Based on Risk
By Caleb Skeath, Ashden Fein, Micaela McMurrough, Ryan Burnette, Bryan Ramirez
On June 10, the Cybersecurity & Infrastructure Security Agency (CISA) released Binding Operational Directive (BOD) 26-04 on Prioritizing Security Updates Based on Risk and the accompanying Implementation Guidance. In releasing…
Debevoise & Pimpton Data Blog
Mythos: Governance, Technical, Business and Regulatory Considerations
By Avi Gesser
The cybersecurity world has been in a state of alarm since Anthropic’s April 7, 2026, announcement of Claude Mythos Preview. And to many, the hysteria does not look like hype.…
Internet, IT & e-Discovery
6 steps to hard cybersecurity based on the Claude Mythos serge!
By Peter Vogel
SCWorld.com reported that “Anthropic’s Claude Mythos Preview has landed with the kind of reception security leaders can’t dismiss. Anthropic says the model has already identified thousands of high-severity vulnerabilities, including in major…
Internet, IT & e-Discovery
Anthropic claims Mythos is a Cybersecurity breakthrough!
By Peter Vogel
The NewYorkTimes.com reported that “Anthropic said on Tuesday, it will make the new model — known as Claude Mythos Preview — available to a consortium of more than 40 technology…
Data Privacy + Cybersecurity Insider
SolarWinds Web Help Desk Vulnerability Targeted by Threat Actors
Security researchers at Huntress Labs have identified a vulnerability in SolarWinds’s Web Help Desk that threat actors are exploiting to allow them to execute code remotely. The vulnerability was listed…
Internet, IT & e-Discovery
Microsoft 365 SharePoint is under attack!
By Peter Vogel
Microsoft Threat Intelligence reported “On July 19, 2025, Microsoft Security Response Center (MSRC) published a blog addressing active attacks against on-premises SharePoint servers that exploit CVE-2025-49706, a spoofing vulnerability, and CVE-2025-49704, a…
Data Privacy + Cybersecurity Insider
WhatsApp Patches Vulnerability That Facilitates Remote Code Execution
WhatsApp users should update the application for vulnerability CVE-2025-30401, which Meta recently patched when WhatsApp was released for Windows version 2.2450.6. Meta cautions Windows users to update to the latest…
Internet, IT & e-Discovery
Good advice from CISOs about 10 best practices for vulnerability management includes strict Service Level Agreements!
By Peter Vogel
CSOonline.com reported “Since modern enterprises run on software, poor vulnerability management represents a serious business risk. So, how are CISOs modernizing their programs to improve risk mitigation?” The April 2,…
Online and On Point
HHS’s Proposed Security Rule Updates Will Require Adjustments to Accommodate Modern Vulnerability and Incident Response Issues
By Eric Setterlund, Brett Lawrence
In this week’s installment of our blog series on the U.S. Department of Health and Human Services’ (HHS) HIPAA Security Rule updates in its January 6 Notice of Proposed Rulemaking…