Blog | Holm Security

April 15, 2026 — Vulnerability management Why vulnerability management is now a leadership responsibility – not an IT problem What does vulnerability management have to do with business risk? More than most leaders realize, and regulators are making that gap increasingly expensive to ignore. By and large, organizations believe they already “have it covered” through a SOC,...

April 7, 2026 — Cyberattacks & exploits Active attacks target critical Fortinet vulnerability – act now

Fortinet has disclosed critical vulnerability CVE-2026-35616 (CVSS score 9.8) in...

March 17, 2026 — Vulnerability management Is Microsoft Defender enough for vulnerability management?

Many organizations today assume that Microsoft’s rapidly expanding security portfolio...

December 11, 2025 — Vulnerability management Vulnerability management grows to exposure management

In today’s threat landscape, attackers don't limit themselves to exploiting known...

Filter posts

React2shell exposes servers to remote code execution

Codenamed React2shell, CVE-2025-55182 is rated CVSS 10.0 (Critical) and affects the server-side part of React known as React Server Components (RSC).

November 26, 2025 — Vulnerability management Securing Operational Technology (OT): The systems that power the world

Cyber security discussions often focus on IT infrastructure, the digital backbone of modern organizations, but in industrial sectors such as energy, utilities,...

The future of vulnerability management: Where AI meets threat intelligence

In today’s fast-paced digital world, IT environments are growing more complex - and so are the threats targeting them. Organizations are increasingly turning...

October 23, 2025 — Company news Securing containerized environments with Kubernetes security

Kubernetes has revolutionized how organizations build, deploy, and scale applications. It is scalable, dynamic, and widely adopted across public clouds,...

Oracle zero-day in its E-Business Suite (EBS) exploited by Clop Group

Oracle has confirmedactive exploitation of a critical zero-day vulnerability in its E-Business Suite (EBS), rated 9.8 on the CVSS v3 scale.

Actively exploited: Cisco ASA and FTD hit via two zero-day flaws

Cisco has warned of two critical vulnerabilities affecting its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software, both already...

The complete platform for a systematic, risk-based, and proactive cyber defense.

Latest insights

Filter posts