PenTestIT.com

Your source for Detection Engineering, Security Research and Adversary Simulation

You are here: Home / Archives for Vulnerability Management

Vulnerability Management Archives:

Cyber Threat Intelligence

Analysis: CVE-2026-88771 and CVE-2026-88772

This is my analysis of the Citrix NetScaler ADC/Gateway CVE-2026-88771 & CVE-2026-88772 vulnerabilities along with hunting & detection guide

Posted: by Leave a Comment
Updated:

Citrix published fixes for eight NetScaler ADC and Gateway CVEs today - September 27, 2026, in bulletin CTX697096. Two of them, CVE-2026-88771 and CVE-2026-88772, were exploited before the bulletin went out. As a result, CISA added both to KEV the same day. This is my analysis of the two vulnerabilities, collation of data from multiple sources and the steps you can take to Read more about Analysis: CVE-2026-88771 and CVE-2026-88772

Cyber Threat Intelligence

Microsoft Patch Tuesday September 2026 Exploitability and Patching Priority

This blog is my interpretation of the Microsoft Patch Tuesday September 2026 Exploitability and Patching Priority

Posted: by
Updated:

Back after a hiatus the Microsoft Patch Tuesday September 2026 Exploitability and Patching Priority blog. Last time I did this was Microsoft Patch Tuesday March 2026 Exploitability and Patching Priority. This time around, I am doing two things differently. I am ranking every priority against CISA BOD 26-04. Interested? Read on! Read more about Microsoft Patch Tuesday September 2026 Exploitability and Patching Priority

Detection Engineering

Essential Detection Engineering Metrics

This is a list of essential detection engineering metrics.

Posted: by
Updated:

You have prioritized your threat detection backlog, but now want to quantify the progress. Throughout my career leading multiple threat detection engineering teams, I have relied on well-defined metrics to measure outcomes, demonstrate program value, and drive continuous improvement. In this post, I outline the detection engineering metrics I consider most important, spanning Read more about Essential Detection Engineering Metrics

Detection Engineering

“Severity” or “Expected Severity” for Prioritization?

This post introduce the concept of "Expected Severity" for threat prioritization.

Posted: by 704 views
Updated:

In one of my last post - Prioritizing a Threat Detection Backlog, I talked about prioritizing your threat detection backlog. It is true when you run a program in an organization. However, when you consume security content from another organization, severity is often generalized. This is where, the concept of expected severity can help and I trust should be used more often. Let Read more about “Severity” or “Expected Severity” for Prioritization?

Vulnerability Management

Microsoft Patch Tuesday March 2026 Exploitability and Patching Priority

This blog is my interpretation of the Microsoft Patch Tuesday March 2026 Exploitability and Patching Priority.

Posted: by 1,153 views
Updated:

This Microsoft Patch Tuesday March 2026 release addressed 93 vulnerabilities across Windows, Office, SQL Server, .NET, and Azure. Interestingly, two CVEs were publicly disclosed pre‑patch CVE‑2026‑21262 (SQL Server EoP) and CVE‑2026‑26127 (.NET DoS). However, unlike last month, no March CVE is confirmed exploited in the wild as of today. What is unusual is the fact that six of Read more about Microsoft Patch Tuesday March 2026 Exploitability and Patching Priority