Posts by Mark Jaffe
Reachability Watch: An AI Agent Platform With Login Off by Default and Nearly 480 New CVEs This Week
- Mark Jaffe
- Updated: October 2, 2026
479 new network-exploitable CVEs, an AI agent platform whose quickstart ships with login off, and how Identity-First Reachability closes the gap....
- Mark Jaffe
- Updated: September 29, 2026
NetFoundry's Reachability Watch tracks new network-exploitable CVEs and KEV-bound vulnerabilities every week — this week: IBM Guardium's access-control bypass and 596 new...
- Mark Jaffe
- Updated: September 18, 2026
This week: Langflow's public MCP endpoint flaw and 1,248 new CVEs. Reachability Watch tracks new network-exploitable CVEs and KEV-bound vulnerabilities every week....
- Mark Jaffe
- Updated: September 10, 2026
906 new CVEs this week, three AI-agent tools with authentication disabled by default, and how Identity-First Reachability closes the gap....
- Mark Jaffe
- Updated: September 4, 2026
This week's Reachability Watch covers 398 new CVEs, a WWBN AVideo admin token that never expires, and how Identity-First Reachability closes the...
- Mark Jaffe
- Updated: August 28, 2026
NetFoundry's Reachability Watch tracks new network CVEs and actively exploited KEVs every week — see what identity-first reachability would have stopped....
- Mark Jaffe
- Updated: August 24, 2026
This week: an 800-CVE Oracle patch day, an unauthenticated AI platform RCE, and what identity-first reachability would have stopped....
- Mark Jaffe
- Updated: August 18, 2026
NetFoundry's Reachability Watch tracks new network CVEs and actively exploited KEVs every two weeks — see what identity-first reachability would have stopped....
