Microsoft analyzes 383,000 vulnerabilities, finding 78% exploited are takeover types
Takeover vulnerabilities including RCE account for 78% of exploited CVEs, with OS code representing 41% of exploited despite 23% of disclosures.
1
Stories per day · 30 days
2 RSS
Relatedattack-path2horizon32nodezero2pentesting2torq2vulnerability-management2appsec1automation1checkmarx1check-point1cvss1data-security1dspm1epss1exploitation1exposure-management1ips1itsm1
18 stories, newest first · one card per story
Stories tagged #remediation
Bedrock Data routes data-exposure fixes to owners and checks results
The feature is generally available with the platform and uses existing Jira or ServiceNow tickets.
1
Pentest remediation workflow ranks findings with CVSS, EPSS and impact
A June 2026 survey of 158 practitioners found 68.4% would be strained by 500 or more candidate findings.
Check Point pitches safe remediation to move unused protections to enforce
The partner piece says 47% of measured organizations had under 50% protection enablement and cites a 99.5% remediation success rate.
1
Checkmarx says PHP patch rush shows remediation bottlenecks
A PHP advisory requires a runtime update because the attack path can run before application code.
From Proven Attack Paths to Verified Fixes: Horizon3 and Torq Close the Remediation Loop
Horizon3 and Torq connect NodeZero attack-path proof to automated remediation and retesting.
Qualys introduces TruConfidence to orchestrate cyber risk remediation
Qualys launched TruRisk Eliminate 2.0 with TruConfidence to orchestrate automated vulnerability remediation.
Integrate to Remediate Proven Attack Paths and Verify Every Fix Automatically
Horizon3 and Torq brief links NodeZero attack-path findings to automated remediation and retesting.
Automation, AI agents or people? Sorting out who handles each security finding
ArmorCode survey of 200 security leaders finds enterprises struggle to triage findings as AI code outpaces review.
3
Vulnerability Backlogs Are an Ownership Problem
A Dark Reading column says vulnerability backlogs stem from unclear asset ownership and limited fix authority.
Legit Security extends automated fixes to vulnerable open-source dependencies
Legit Security now uses its agent to patch vulnerable open-source dependencies and open verified pull requests.
2
Begin at the End: How to Enable Agentic Remediation
Opinion column urges teams to automate low-risk patching with bounded AI agents and keep humans on high-risk fixes.
1
KEVGraph: Exploitation-Aware Dependency Vulnerability Remediation
KEVGraph orders dependency upgrades so CISA KEV fixes precede higher-CVSS vulnerabilities.
Triage is where backlogs are born. Checkmarx Triage & Remediation Assist is how they’re cleared.
Checkmarx launches Triage & Remediation Assist, an AI feature in Checkmarx One that assesses SAST/SCA finding reachability and generates suggested code fixes.
Webinar Today: Keep Pace With AI – A New Operating Model for Endpoint Remediation
SecurityWeek and Automox host a webinar on accelerating endpoint vulnerability remediation through automation and governance policies.
Seemplicity Response Options accelerates vulnerability mitigation
Seemplicity launched Response Options, giving vulnerability teams compensating controls and targeted changes instead of waiting on full remediation cycles.
Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt
ActiveState webinar examines how AI coding tools accelerate open-source dependency additions and create remediation debt, based on a survey of 300 enterprise leaders.
2
The Closed Loop Remediation Playbook with Wiz
Wiz announces Workflows general availability and public preview of Remediation and Response for closed-loop, automated cloud remediation.