CVSS tells you potential impact. Threat intelligence tells you reality. Here's how a hybrid approach to vulnerability prioritisation actually works — and why a high CVSS score doesn't always mean high risk.
CVE volume and exploit speed have surged in 2025. With most teams able to fix only one in ten issues, and attackers moving within hours, vulnerability management has become a scale problem that demands a threat-led and automated approach.
Funding lapses and delays have exposed how fragile the National Vulnerability Database has become. As updates pause and backlogs grow, Cytidel explores what this means for vulnerability management — and how security teams can stay resilient when public data sources slow down.
Security teams are drowning in vulnerability alerts. With 135,000+ "High" and "Critical" CVEs, traditional CVSS prioritization overwhelms teams. Learn how three intelligence sources - CISA KEV, EPSS, and MSRC - help you focus on what matters and move from alert fatigue to action
Cytidel take a look at the top trending vulnerabilities of 2024, plus some significant risk vulnerabilities you may have missed
This is part two of a two-part blog post series that aims to simplify what DORA compliance entails from a TVM perspective and offer actionab
With DORA regulations fast approaching in January 2025, financial institutions need to ensure their Threat & Vulnerability Management (TVM)
9 tips you can use to help get your business ISO27001 Certified
A critical security flaw, identified as CVE-2024-38200, has been discovered in several versions of Microsoft Office, including Office 2016,
The Top 12 most critical vulnerabilities that trended during Q2 2024, and 5 other trends you should know about
Announcing Our ISO27001 Certification: A Milestone in Our Commitment to Security and Compliance
Cytidel's analysis of the top trending vulnerabilities Q1 2024. Highlighting key vulnerabilities, observable patterns and associated threat actors. A detailed report providing essential insights for strategic security planning and risk management.
Threat Intelligence
The Top 10 trending vulnerabilities in 2023 with significant threat activity (and how to fix them).
Cytidel focuses on helping business leaders and executives make efficient, high-impact decisions, by identifying which cyber risks pose the biggest threat to their business. Cytidel’s risk prioritisation engine analyses several factors such as threat intelligence, critical revenue streams, and regulatory requirements. In an environment where senior individuals are under
Threat Intelligence
ISO 27001:2022 introduced 11 new controls, including A.5.7, Threat Intelligence. This article focuses on what you need to know, and do, to stay compliant.
Risk-Based Vulnerability Management
Risk-based Vulnerability Management is a strategic way for organisations to identify, assess and prioritise vulnerabilities based on their potential impact. RBVM allows organisations to overcome the limitations of CVSS and focus on the most critical risks first.