Mark Jaffe

This week’s Reachability Watch covers nearly 440 new CVEs, an unauthenticated script endpoint in LMCache, and how Vulnerability Cloaking closes the gap.

479 new network-exploitable CVEs, an AI agent platform whose quickstart ships with login off, and how Identity-First Reachability closes the gap.

NetFoundry's Reachability Watch tracks new network-exploitable CVEs and KEV-bound vulnerabilities every week — this week: IBM Guardium's access-control bypass and 596 new CVEs.

This week: Langflow's public MCP endpoint flaw and 1,248 new CVEs. Reachability Watch tracks new network-exploitable CVEs and KEV-bound vulnerabilities every week.

906 new CVEs this week, three AI-agent tools with authentication disabled by default, and how Identity-First Reachability closes the gap.

This week's Reachability Watch covers 398 new CVEs, a WWBN AVideo admin token that never expires, and how Identity-First Reachability closes the gap.

NetFoundry's Reachability Watch tracks new network CVEs and actively exploited KEVs every week — see what identity-first reachability would have stopped.

This week: an 800-CVE Oracle patch day, an unauthenticated AI platform RCE, and what identity-first reachability would have stopped.