Vulnerability Management

Oracle Maps Its Security Programs to the EU Cyber Resilience Act

Oracle says its established vulnerability management and incident response capabilities support the EU Cyber Resilience Act reporting obligations that became applicable September 11, 2026, while it prepares for broader product lifecycle requirements arriving December 11, 2027.

Security

CISA Warns AI Could Overwhelm Defenders Already Buried in Technical Debt

CISA Acting Director Nick Andersen warns that AI and accumulated technical debt could overwhelm infrastructure operators with vulnerabilities, increasing pressure to prioritize the risks with the greatest operational consequences as the agency rebuilds its cyber workforce.

Security

SAP August Patch Day Raises the Stakes for Manufacturing Security Teams

SAP Security Patch Day August 2026 delivered 28 new Security Notes, including six affecting SAP MII, putting new pressure on manufacturing security and remediation teams.

Security

Oracle Payments Flaw Shows Why Legacy ERP Can’t Patch at Back-Office Speed

A critical Oracle E-Business Suite vulnerability affecting Oracle Payments faced active exploitation attempts, putting renewed attention on how quickly enterprises patch legacy ERP environments tied to finance and payment workflows002E Cybersecurity Dive reported on July 1 that researchers observed exploitation...

Security

July Patch Day Gave an AI Wake-Up Call from Microsoft, ServiceNow, and SAP

July's record-breaking patch cycle from Microsoft, ServiceNow, and SAP highlights a new reality for enterprise security teams. AI is accelerating vulnerability discovery, shrinking remediation windows, and expanding the attack surface across ERP systems, cloud platforms, identity infrastructure, and business-critical workflows.

Sign at the National Institute of Standards and Technology (NIST) campus, highlighting the agency behind CVE and NVD vulnerability standards.

Security

What NIST’s CVE Shift Means for ERP Security Teams

NIST is changing how CVEs are enriched in the National Vulnerability Database, reducing the consistency of risk signals used to prioritize vulnerabilities. For ERP security teams, the shift increases reliance on vendor guidance and system-specific context to assess exposure.

Photo of a glass wing butterfly_Anthropic Project Glasswing

Security

Anthropic Enlists Hyperscalers, Security Giants to Secure Critical Software Infrastructure With AI

Anthropic has launched Project Glasswing, enlisting hyperscalers and security giants to use AI to detect and fix vulnerabilities across critical software infrastructure.