--- title: "#vulnerability-management articles | Hashnode" description: "Explore 143 articles tagged #vulnerability-management on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/vulnerability-management" --- Tag # #vulnerability-management 143 posts · 13 followers [Xccelera AI](https://hashnode.com/@xccelera) · [1d ago](https://hashnode.com/posts/batch-fixing-cves-across-repos-with-ai-agents/6af2edbf82596ba802d42d6b) ### [Batch-Fixing CVEs Across Repos With AI Agents](https://xccelera.hashnode.dev/batch-fixing-cves-across-repos-with-ai-agents?utm_source=hashnode&utm_medium=feed) Learn how AI agents batch fix CVEs across repos: dedupe findings, upgrade packages, test every fix, and open reviewed pull requests with evidence. 6 min read · [xccelera.hashnode.dev](https://xccelera.hashnode.dev/batch-fixing-cves-across-repos-with-ai-agents?utm_source=hashnode&utm_medium=feed) [Hazel Chirinda](https://hashnode.com/@hazelchirinda) · [2d ago](https://hashnode.com/posts/patch-management-is-cybersecurity-the-importance-of-timely-updates/6af168b244876defd5da83c4) ### [Patch Management is Cybersecurity: The Importance of Timely Updates](https://hazelsec.hashnode.dev/patch-management-is-cybersecurity-the-importance-of-timely-updates?utm_source=hashnode&utm_medium=feed) Learn how patch management reduces cyber risk, how to prioritise vulnerable systems, and how to verify updates across your environment. 11 min read · [hazelsec.hashnode.dev](https://hazelsec.hashnode.dev/patch-management-is-cybersecurity-the-importance-of-timely-updates?utm_source=hashnode&utm_medium=feed) [Kazem Mortazavi](https://hashnode.com/@kazem-mortazavi) · [6d ago](https://hashnode.com/posts/cyber-threat-intelligence-the-four-levels-that-move-a-security-team-beyond-reacting/6aec0b51b2431fc02d5ed160) ### [Cyber Threat Intelligence: The Four Levels That Move a Security Team Beyond Reacting](https://securityland.hashnode.dev/cyber-threat-intelligence-the-four-levels-that-move-a-security-team-beyond-reacting?utm_source=hashnode&utm_medium=feed) Most security teams start their day with an alert: the EDR or the SIEM reports something, and the investigation begins. The problem is that in this model the attacker has always made the first move. C 3 min read · [securityland.hashnode.dev](https://securityland.hashnode.dev/cyber-threat-intelligence-the-four-levels-that-move-a-security-team-beyond-reacting?utm_source=hashnode&utm_medium=feed) [Kazem Mortazavi](https://hashnode.com/@kazem-mortazavi) · [Nov 3](https://hashnode.com/posts/continuous-vulnerability-management-the-gap-between-two-scans-is-the-attack-window/6ae96794edf2e81552774089) ### [Continuous Vulnerability Management: The Gap Between Two Scans Is the Attack Window](https://securityland.hashnode.dev/continuous-vulnerability-management-the-gap-between-two-scans-is-the-attack-window?utm_source=hashnode&utm_medium=feed) Last quarter's vulnerability scan report was clean. Two weeks later, a critical CVE was published for a service running on one of the organization's internet-facing servers. The next scan was two mont 2 min read · [securityland.hashnode.dev](https://securityland.hashnode.dev/continuous-vulnerability-management-the-gap-between-two-scans-is-the-attack-window?utm_source=hashnode&utm_medium=feed) [Circuit & Capital](https://hashnode.com/@circuitsfit) · [Oct 31](https://hashnode.com/posts/cisa-added-magento-and-a-compression-library-ask-who-owns-the-patch/6ae6651a7b5644e7fe2118db) ### [CISA added Magento and a compression library. Ask who owns the patch.](https://circuitsfit.hashnode.dev/cisa-added-magento-and-a-compression-library-ask-who-owns-the-patch?utm_source=hashnode&utm_medium=feed) Originally published at circuits.fit On Tuesday, October 27, 2026, CISA added two bugs to its Known Exploited Vulnerabilities catalog: an unrestricted file upload flaw in Adobe Commerce and Magento Op 7 min read · [circuitsfit.hashnode.dev](https://circuitsfit.hashnode.dev/cisa-added-magento-and-a-compression-library-ask-who-owns-the-patch?utm_source=hashnode&utm_medium=feed) [Brandon Sooknanan](https://hashnode.com/@varaxonceo) · [Oct 28](https://hashnode.com/posts/test-a-vulnerability-reporting-tool-in-14-days/6ae23ea11d1a7a1f915e3c1a) ### [How to test a vulnerability reporting tool in 14 days](https://blog.varaxontech.com/test-a-vulnerability-reporting-tool-in-14-days?utm_source=hashnode&utm_medium=feed) A day-by-day plan for a free trial, so you finish it with a real answer instead of a vague feeling 5 min read · [blog.varaxontech.com](https://blog.varaxontech.com/test-a-vulnerability-reporting-tool-in-14-days?utm_source=hashnode&utm_medium=feed) [Brandon Sooknanan](https://hashnode.com/@varaxonceo) · [Oct 28](https://hashnode.com/posts/close-the-loop-on-every-vulnerability-finding/6ae23e1c8a578f3ec7e3f5da) ### [Fixed, accepted or ticketed: close the loop on every vulnerability finding](https://blog.varaxontech.com/close-the-loop-on-every-vulnerability-finding?utm_source=hashnode&utm_medium=feed) A finding that has no owner, no date and no outcome is just a line in a PDF 5 min read · [blog.varaxontech.com](https://blog.varaxontech.com/close-the-loop-on-every-vulnerability-finding?utm_source=hashnode&utm_medium=feed) [Brandon Sooknanan](https://hashnode.com/@varaxonceo) · [Oct 28](https://hashnode.com/posts/billable-vulnerability-remediation/6ae23d848a578f3ec7e26a0c) ### [Turning vulnerability scan results into billable remediation work](https://blog.varaxontech.com/billable-vulnerability-remediation?utm_source=hashnode&utm_medium=feed) How MSPs can separate what the contract covers from project work the client should approve and pay for 4 min read · [blog.varaxontech.com](https://blog.varaxontech.com/billable-vulnerability-remediation?utm_source=hashnode&utm_medium=feed) [Brandon Sooknanan](https://hashnode.com/@varaxonceo) · [Oct 27](https://hashnode.com/posts/end-of-life-software-in-vulnerability-reports/6ae01c2d4e3cef0986da47a9) ### [End-of-Life Software in Vulnerability Reports: What to Do When There's No Patch Coming](https://blog.varaxontech.com/end-of-life-software-in-vulnerability-reports?utm_source=hashnode&utm_medium=feed) How to find unsupported systems, explain them to clients and plan their way out 4 min read · [blog.varaxontech.com](https://blog.varaxontech.com/end-of-life-software-in-vulnerability-reports?utm_source=hashnode&utm_medium=feed) [Brandon Sooknanan](https://hashnode.com/@varaxonceo) · [Oct 27](https://hashnode.com/posts/whats-new-in-scan-hub-october-2026/6ae01c4f3dbde4a6be602b45) ### [What's new in Varaxon Scan Hub: October 2026](https://blog.varaxontech.com/whats-new-in-scan-hub-october-2026?utm_source=hashnode&utm_medium=feed) Email check, proof of fix, proof packs and more evidence behind every ranking 5 min read · [blog.varaxontech.com](https://blog.varaxontech.com/whats-new-in-scan-hub-october-2026?utm_source=hashnode&utm_medium=feed)