Vulnerabilities & Advisories
Blog category
Vulnerabilities & Advisories
In this category, we put newly disclosed vulnerabilities and security advisories into context: what is affected, how serious the situation is, and which steps make sense now.
Vulnerabilities & Advisories
Putting current vulnerabilities into context
When vendors, open source projects, or CERTs warn of a critical flaw, the first question is whether your own environment is affected. The articles in this category summarize the known facts: the related CVE records, the CVSS rating, affected versions and components, and the status of updates and interim measures.
The focus is on steps you can take in day-to-day operations: finding affected systems, prioritizing and installing updates, and checking for traces of a possible attack. Where information is still changing, we state the date and the sources.
How we systematically identify and assess vulnerabilities in your environment is described on our vulnerability assessment page.