Runtime Bill of Materials Hardens Container Images
An RBOM combined with SBOM lets teams remove unused components from container images based on observed execution.
Stories per day · 30 days
4 RSS
Relatedcisco3active-directory1collaboration1container1cwe-7871emergency-responder1expressway1intcube1kerberos1municipalities1out-of-bounds1rbom1snort1unified-communications1unity-connection1windows-server1
31 stories, newest first · one card per story
Stories tagged #hardening
Cisco Expressway Series October 2026 hardening covers internal flaws
Cisco grouped the issues by weakness class and assigned one CVE to each group, but IDs are not in the excerpt.
Cisco UC products get October 2026 hardening for internal flaws
Cisco says the issues were found in internal testing and are not known to be exploited.
Cisco ships Snort 3 hardening for CVE-2026-20043 out-of-bounds writes
An internal Snort 3 review grouped multiple out-of-bounds write issues, CWE-787, under CVE-2026-20043.
Why Active Directory weaknesses stay open for years in teams with one or two admins
intcube led 27 municipalities through a 12-week program to harden Windows Server and Active Directory.
2
Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026
Cisco’s October 2026 APIC hardening release patches internally found flaws that are not known to be exploited.
Cisco NX-OS Software Security Hardening Release: October 2026
Cisco issued an October 2026 NX-OS hardening release for internally found flaws not known to be exploited.
Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026
Cisco released October 2026 License On-Prem hardening updates for multiple internally found, unexploited vulnerabilities.
Cisco IOS XE Software Security Hardening Release: August 2026
Cisco released August 2026 IOS XE hardening updates for internally found flaws not known to be exploited.
Cisco Advance Notification for Publication of October 7, 2026, Security Advisories
Cisco will publish October 7 security advisories and hardening fixes for NX-OS, Meraki, APIC, and related products.
HardenedBSD August / September 2026 Status Report
HardenedBSD's status report details hardening changes, jail migrations, and an unencrypted Radicle node-traffic flaw.
3
Managed or Modified: Choose How Huntress Hardens Microsoft 365
Huntress now offers managed or review-first rollouts for Microsoft 365 identity hardening.
1
Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026
Cisco's September 2026 firewall hardening release fixes internally found ASA, FTD, and FMC flaws, two of which are actively exploited.
2
Cisco Identity Services Engine Hardening Release: September 2026
Cisco ISE hardening release fixes multiple internally discovered vulnerabilities, including an authentication bypass known to be actively exploited.
1
Cisco Nexus Dashboard Software Security Hardening Release: September 2026
Cisco released Nexus Dashboard hardening updates for multiple internally discovered vulnerabilities, grouped by CWE and not known to be exploited.
CISA Shares 17 Techniques Used by Hackers to Compromise Active Directory
CISA and five international agencies publish joint guidance detailing 17 techniques attackers use to compromise Microsoft Active Directory environments.
2
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
Cisco's September 2026 hardening release for Secure Email Gateway and Secure Email and Web Manager patches internally found flaws, one actively exploited.
BleachBit 6.0.4 fixes secure wiping that skipped clusters on Windows
BleachBit 6.0.4 fixes Windows secure-wipe bugs that skipped fragmented-file clusters, adds HSTS tracker deletion, early macOS support, and broad hardening.
CISA tells operators to harden Siemens S7 PLCs. Here’s how to do it without disrupting production
CISA, NSA, FBI and other agencies warn of active targeting of internet-exposed Siemens S7 PLCs and urge patching, exposure removal and hardening.
8
GrapheneOS Overhauled Default Apps and Secure Clipboard
GrapheneOS announced an overhaul of its default apps and a redesigned secure clipboard in its privacy-focused Android distribution.
WordPress Security Plugins: How to Choose the Right One
Sucuri's guide breaks WordPress security plugins into hardening, malware scanning, integrity monitoring, and filtering types, and explains how to evaluate and layer them.
Cisco IOS XR Software Security Hardening Release: September 2026
Cisco released IOS XR security hardening fixes for multiple internally discovered vulnerabilities, grouped by CWE class, with no known active exploitation.
Windows memory integrity switches on automatically for eligible devices in October 2026
Microsoft's Windows quality updates will automatically enable memory integrity and Virtualization-based Security on eligible devices starting October 2026.
3
Rootless Docker and Its Hidden Security Trade-Offs
A blog post examines the security trade-offs of running Docker in rootless mode, covering isolation benefits and hidden limitations for defenders.