The Cyberwatch blog

Technical articles, vulnerability analyses, best practices, and cybersecurity news.

Our topics

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

News

replay

Cyber Resilience Act: the first obligations come into effect

As of September 11, 2026, manufacturers of products with digital elements placed on the European Union market must report actively exploited vulnerabilities and significant security incidents affecting their products.

Tutorials

replay

Air gap: secure your sensitive or disconnected environments with Cyberwatch

Air gap: discover how to secure and analyze your isolated critical systems, even without a network, using Cyberwatch's offline capabilities.

Exposure management

replay

CSPM (Cloud Security Posture Management): definition, challenges, and implementation with Cyberwatch

CSPM, CWPP, CNAPP: Discover how to secure your multicloud environments and workloads with a unified, continuous approach using Cyberwatch.

Exposure management

replay

CTEM (Continuous Threat Exposure Management): continuously master your exposure surface with Cyberwatch

Discover CTEM (Continuous Threat Exposure Management): methodology, key steps, and practical implementation with Cyberwatch.

News

replay

Vulnerability management in the age of generative AI

In 2025, no fewer than 48,000 CVEs were published. AI is set to become essential for identifying, enriching, and prioritizing risks, as well as for automating remediation.

Exposure management

replay

EASM (External Attack Surface Management): how to master your external attack surface

Discover EASM (External Attack Surface Management) and how Cyberwatch helps you map, analyze, and monitor your external attack surface.

Exposure management

replay

Net-NTLMv1: the Achilles' heel of aging Windows environments

Even if Net-NTLMv1 is not currently in use in your environment, it is essential to disable this feature as soon as possible to prevent abandoned legacy servers from becoming an entry point into your IT infrastructure.

CVE

replay

CVE-2025-55182 React2Shell: How to detect and fix this vulnerability in React and Next.js?

In this article, learn how to scan for and detect CVE-2025-55182 using Cyberwatch.

Product

replay

Cyberwatch 15.0: discover the new major version of Cyberwatch

Cyberwatch 15.0: discover the new features of the Cyberwatch vulnerability management software.

Tutorials

replay

Use AWS Session Manager to scan your assets on Cyberwatch

In this article, learn how to use AWS Session Manager to scan your assets on Cyberwatch.

Product

replay

Adopt a DevSecOps approach with Cyberwatch

DevSecOps integrates security as a core component of the software development lifecycle.

Exposure management

replay

Cyberwatch alerts: managing your IT infrastructure effectively

Cyberwatch alerts notify you in real time about vulnerabilities, security flaws, and unsupervised assets.

Tutorials

replay

Patch management on Windows: how can Windows Package Manager change the game?

Windows patch management: discover how Windows Package Manager can be a game changer in our latest article.

Vulnerability database

replay

Cyberwatch strengthens its coverage to address sovereignty challenges

Cyberwatch integrates European cybersecurity alert sources for sovereign monitoring that complies with regulations.

Vulnerability Management

replay

Exploit Prediction Scoring System (EPSS) score: what to expect from version 4.0?

Discover how the Exploit Prediction Scoring System works, along with its pros and cons compared to the CVSS score.

Vulnerability Management

replay

Understanding and preventing Insecure Direct Object References (IDOR)

IDOR: discover how this vulnerability works and the best practices for preventing it in your web applications.

CVE

replay

CVE-2024-6387 regreSSHion: detect and remediate this vulnerability on OpenSSH

Discover all the technical details regarding CVE-2024-6387, a new RCE vulnerability in OpenSSH software.

CVE

replay

CVE-2024-3094: everything you need to know about this XZ Utils vulnerability

Discover all the technical details regarding CVE-2024-3094, a backdoor inserted into the XZ Utils code.

Vulnerability Management

replay

Prioritizing CVEs: how to combine CVSS, EPSS, and CISA KEV

Learn how to prioritize CVEs by combining CVSS scores, EPSS, and the CISA KEV catalog.

Vulnerability Management

replay

EPSS: What is the Exploit Prediction Scoring System?

Discover how the EPSS score works, along with its pros and cons compared to the CVSS score.

Tutorials

replay

How do I scan Docker image vulnerabilities in a GitLab pipeline using Cyberwatch?

Scanning a Docker image can be very useful when used in a CI/CD process, particularly in a GitLab pipeline.

CVE

replay

Spring4Shell CVE-2022-22965: everything you need to know about the Java Spring vulnerability

Learn how the CVE-2022-22965 Spring4Shell vulnerability in the Spring Framework works and how to mitigate it.

Vulnerability Management

replay

How to use MITRE ATT&CK to analyze a cyber threat?

Discover how to use the MITRE ATT&CK framework to analyze your exposure to a cyber threat.

CVE

replay

CVE-2021-44228 Log4Shell: how to detect and fix this vulnerability in Log4J?

Discover how the CVE-2021-44228 Log4Shell vulnerability in Apache Log4j works and learn how to neutralize it.

Tutorials

replay

PetitPotam: recommended actions to neutralize this attack

Learn how the PetitPotam attack works and how to neutralize it using RPC filters.

Tutorials

replay

How can you check if your phone has been infected with Pegasus?

Find out how to check if your phone has been infected by Pegasus and learn how to scan your device using the MVT software.

CVE

replay

CVE-2021-34527: How to identify and neutralize the PrintNightmare vulnerability?

Learn how to use, detect, and address the PrintNightmare CVE-2021-34527 vulnerability targeting the Windows Print Spooler.

CVE

replay

How to identify and neutralize the CVE-2020-1472 (ZeroLogon / Netlogon) vulnerability?

CVE-2020-1472 (ZeroLogon/NetLogon) vulnerability: discover all the specifics of this vulnerability and how to neutralize it.

Sign up for our newsletter

Don't miss out on any updates; get our latest articles delivered straight to your inbox.

© 2026 Cyberwatch SAS. All rights reserved.

Legal NoticeCookie Settings