Operations | Monitoring | ITSM | DevOps | Cloud

NuttX Bluetooth Vulnerability Explained

Discover the hidden vulnerabilities lurking in even the most trusted software! In this video, François Baldassari dives into the shocking reality of a recent CVE filed against NuttX, revealing how easily mature projects can expose your products to security threats. Are you up-to-date with your RTOS? Find out what steps you need to take to protect your systems now!

How to detect vulnerable GitHub Actions at scale with Zizmor

As we previously reported on April 26, 2025, we had a security incident via an insecure GitHub Action and we have since published a post-incident review. We have confirmed that there has been no code modification, unauthorized access to production systems, exposure of customer data, or access to personal information.

Seal the Silo: Unifying Vulnerability and App Security with a Risk-Based Approach

Seal the Silo: Unifying Vulnerability and App Security with a Risk-Based Approach Too often, security teams assess infrastructure and application exposure risks in silos, leading to fragmented insights and misaligned remediation priorities. Taking this disjointed approach makes it harder to reduce your overall risk and weakens your security posture.

Inside Vulnerability Management: Live Demo & Roadmap

Explore what’s new — and what’s coming next — in Vulnerability Management for N-central and N-sight. Hosted by Product Manager Geoff Green, this session covers current capabilities, recent enhancements, and a look at the roadmap. Watch the live demo, hear how your feedback is shaping development, and get answers to top questions in the live Q&A. Now included in both N-central and N-sight RMM platforms.

OWASP CI/CD Part 8: Ungoverned Usage of 3rd Party Services

The boundaries of what organizations build internally and what they adopt externally have blurred. Developers routinely integrate third-party services into critical CI/CD pipelines, often with minimal friction and limited oversight. This rapid plug-and-play convenience, while key to modern engineering velocity, is also quietly expanding the attack surface in ways many teams struggle to track - let alone govern.

Understanding Vulnerability and Patch Management Challenges #shorts

Understanding Vulnerability and Patch Management Challenges Vulnerability and patch management often face challenges due to persistent false findings. OS updates can create missed maintenance windows, leaving systems exposed. Applying cumulative updates correctly can help resolve these issues. However, systems may still show as up to date while harboring vulnerabilities due to misidentified software. A notable example is a Java vulnerability that continues to exist despite updates, as it is part of a custom solution.

OWASP CI/CD Part 7: Insecure System Configuration

Insecure system configuration is a textbook example of how neglected settings can create an entry point for attackers targeting your CI/CD pipelines. It’s rarely the cutting-edge zero-day that causes a breach. More often, it’s the unpatched service, the overly permissive role, or the default password that was never changed. While this risk overlaps with CI/CD credential hygiene (covered in Part 6 of our OWASP CI/CD series), the focus here is much broader.

Navigating the Growing Challenge of CVEs in Cybersecurity #shorts

Navigating the Growing Challenge of CVEs in Cybersecurity Assets and known CVEs increase annually, complicating the work of security teams. Accumulating old CVEs and overwhelming data from vulnerability scans make compliance difficult. Security teams produce detailed reports for IT teams to address. While regular OS updates can fix many CVEs, delays create backlogs. Improved reporting in the Linux kernel enhances visibility but adds to the number of CVEs, highlighting the need to manage data effectively to tackle vulnerabilities.

OWASP CI/CD Part 6: Insufficient Credential Hygiene

This post, part six of our OWASP CI/CD Top 10 series, looks at some of the common risks associated with Insufficient Credential Hygiene. By better understanding the flaws that affect credential hygiene, we can better understand how even the most sophisticated pipelines were compromised.