Blog | Holm Security (4)

December 9, 2024 — Vulnerability management SOC vs. vulnerability management: Do you need both? There's a lot of buzz around SOCs At Holm Security, we meet with thousands of organizations every year. A clear trend is that more and more organizations are starting a vulnerability management program, but many organizations are considering implementing a...

November 25, 2024 — Vulnerability management Vulnerability management – more important than ever before

A constantly growing challenge in an evolving threat landscape Today, technological...

November 13, 2024 — Vulnerability management How vulnerability management helps comply with NIS2

Systematic & risk-based = proactive cyber defense When analyzing the key purpose of NIS...

May 10, 2024 — Cyberattacks & exploits Google Chrome zero-day vulnerability exploited in the wild

Understanding the vulnerability: A memory issue in Chrome The identified vulnerability...

Filter posts

April 12, 2024 — Cyberattacks & exploits Zero-day vulnerability in Palo Alto Networks PAN-OS exploited in the wild

Understanding the vulnerability CVE-2024-3400 Tracked as CVE-2024-3400 and rated with the maximum CVSS score of 10.0, this is a command injection vulnerability...

February 27, 2024 — Cyberattacks & exploits Critical vulnerabilities discovered in ConnectWise ScreenConnect

Understanding the vulnerabilities CVE-2024-1708 This is a path-traversal vulnerability with a CVSS score of 8.4 affecting ScreenConnect 23.9.7 and earlier,...

January 24, 2024 — Cyberattacks & exploits Critical security flaw in GoAnywhere MFT: Users exposed to unauthorized admin access

Understanding CVE-2024-0204 This vulnerability, with a high CVSS score of 9.8, arises from a path traversal weakness in the "/InitialAccountSetup.xhtml"...

January 23, 2024 — Cyberattacks & exploits Exploited vulnerabilities in Ivanti: Connect Secure and Policy Secure pose serious threats

Understanding CVE-2023-46805 & CVE-2024-21887 CVE-2023-46805, rated CVSS 8.2, is a vulnerability in the Ivanti Connect Secure (ICS) web component that allows...

October 18, 2023 — Cyberattacks & exploits Cisco zero-day vulnerability: Exploiting thousands of devices

Understanding CVE-2023-20198 The vulnerability, rooted in the web UI feature, affects Cisco IOS XE software with enabled HTTP or HTTPS server features....

September 7, 2023 — Compliance DORA decoded: Fusing operational resilience & vulnerability management

What is the Digital Operational Resilience Act (DORA)? The Digital Operational Resilience Act (DORA), or Regulation (EU) 2022/2554, addresses a crucial gap in...

Risk assessments for NIS/NIS2 compliance

The complete platform for a systematic, risk-based, and proactive cyber defense. Made in Europe.

Latest insights

Filter posts