Blog | Holm Security

October 13, 2026 — Company news Inside a Microsoft 365 security assessment: What gets checked & what Secure Score misses In May 2026, Microsoft's security team disclosed a breach case study. A single compromised identity escalated into a full compromise of a targeted organization's Microsoft 365 and Azure environment. The campaign, tracked as Storm-2949, didn't need malware or...

October 7, 2026 — Vulnerabilities Vulnerability threat intelligence & AI: How Holm Security builds tests

Holm Security uses AI to draft vulnerability tests from vulnerability threat...

September 29, 2026 — OT security Three years and counting: How long critical vulnerabilities survive in industrial systems

Holm Security's Security Research team has found that the typical critical vulnerability...

September 24, 2026 — Security trends From severity to risk: What CISA's shift means for risk-based vulnerability management

Severity no longer decides what gets patched first. That's the message behind a small but...

Filter posts

September 17, 2026 — Company news Holm Security and Sekoia integrate to close the SOC visibility gap

A new technology integration brings Holm Security's vulnerability and asset intelligence into Sekoia's autonomous SOC platform, giving analysts and AI agents...

September 9, 2026 — Cyberattacks & exploits Cybercriminals are backdooring online stores running Magento and Adobe Commerce

Adobe released an emergency fix on 7 September for a vulnerability in Adobe Commerce and Magento Open Source that cybercriminals had already been exploiting...

September 8, 2026 — Vulnerability management How to run a vulnerability management program with a small IT team

You don't need a Security Operations Center (SOC) to run a vulnerability management program. You do need a platform that doesn't assume you have one.

September 4, 2026 — OT security Why a SCADA scanner alone won't secure OT

The air gap that once protected OT is mostly gone. Industry 4.0 and remote monitoring have wired the industrial network into everything else, and the attack...

September 4, 2026 — Cyberattacks & exploits Cybercriminals chain two SonicWall vulnerabilities to break into remote-access appliances

SonicWall disclosed two vulnerabilities in its SMA1000 remote-access appliances on 1 September, and cybercriminals are already exploiting both. CVE-2026-83548...

September 2, 2026 — Cyberattacks & exploits Cybercriminals are hijacking Langflow servers for cloud keys

A critical vulnerability in Langflow - a widely used open-source tool for building AI applications - lets anyone on the internet take full control of the...

The complete platform for a systematic, risk-based, and proactive cyber defense.

Latest insights

Filter posts