The software products the security industry is discussing right now. Ranked by mention velocity across vulnerability disclosures, vendor advisories, and threat intelligence — refreshed continuously.
Ranked by Mallory's mention-velocity model across sources.
The Linux kernel is an open-source, Unix-like operating system kernel that provides the core execution environment for Linux distributions and other systems, including Android. It manages processes, memory, hardware devices, filesystems, networking, and access controls, exposing system-call interfaces to userspace applications. Its modular monolithic architecture supports loadable drivers and a broad range of processor architectures. Major subsystems include wired and wireless networking, Bluetooth, storage, graphics, USB, performance monitoring, and KVM virtualization. The kernel is distributed under the GNU General Public License version 2.
Nessus Agent is Tenable's host-based vulnerability assessment sensor for Windows, Linux, and macOS systems. Installed locally on an endpoint or server, it executes supported Nessus plugins to assess installed software, missing security updates, vulnerabilities, and configuration weaknesses. Agents report assessment results to a supported Tenable management platform for centralized analysis and remediation tracking. Local execution reduces dependence on network reachability and remotely supplied administrative credentials, supporting assessment of intermittently connected and otherwise difficult-to-scan systems. Detection methods vary by plugin and may rely on installed package inventories or reported software versions rather than exploitation testing.
Nessus is a vulnerability assessment product developed by Tenable for identifying security weaknesses in operating systems, applications, and network services. It uses a plugin-based scanning engine to perform remote assessments and authenticated local checks, including detection of vulnerable software versions, missing security updates, and insecure configurations. Findings include severity ratings, vulnerability references, and remediation guidance. Some checks infer exposure from self-reported application versions or vendor-reported package information rather than directly testing exploitation; such findings identify potentially vulnerable installations without demonstrating exploitability.
Debian GNU/Linux is a community-developed, general-purpose operating system maintained by the Debian Project. It combines the Linux kernel with GNU utilities and a large collection of packaged applications and services. Debian uses the dpkg package format and APT tools to install software, resolve dependencies, and distribute updates. Its stable, testing, and unstable branches support different requirements for release stability and software freshness. Debian supports multiple hardware architectures and provides security advisories and package updates for supported releases. It is widely deployed on servers, desktops, virtual machines, and container environments and serves as the foundation for numerous other Linux distributions.
Chromium is an open-source web browser and browser-development project that provides the foundation for Google Chrome, Microsoft Edge, Brave, and other browsers. It uses the Blink rendering engine and V8 JavaScript engine to display web content and run web applications. Its multiprocess architecture isolates rendering workloads, while sandboxing restricts renderer access to operating-system resources and files. Security capabilities include site isolation, internationalized domain-name display safeguards, and support for WebAuthn authentication. Chromium is distributed through operating-system packages and other channels, with packaging, update delivery, and bundled functionality varying by distributor. It is distinct from Google Chrome, which adds proprietary components and Google-specific services.
Windows is Microsoft's proprietary family of operating systems for personal computers, workstations, and servers. Modern Windows systems use the Windows NT architecture and provide a graphical desktop, multitasking, user and access management, networking, and broad application and hardware compatibility. Windows includes service management, a configuration registry, event logging, host firewall capabilities, and administrative interfaces for local and centrally managed environments. Its process, authentication, installation, and registry telemetry supports security monitoring, incident investigation, and forensic analysis, although detailed auditing can require additional configuration.
Fedora Linux is a community-developed, open-source Linux distribution produced by the Fedora Project and sponsored by Red Hat. It provides a general-purpose operating system for desktop, server, cloud, and container workloads, integrating recent upstream software through a regular release cycle. Fedora uses RPM packages and DNF package management, includes SELinux security controls, and distributes security fixes through advisory-associated package updates. Its update workflow includes testing repositories and automated gating before eligible updates reach stable repositories.
Red Hat Enterprise Linux (RHEL) is an enterprise Linux operating system developed and maintained by Red Hat for commercial and institutional computing environments. It provides a Linux kernel, RPM-based software packages, system administration tools, networking services, development runtimes, and security controls. RHEL supports physical servers, virtual machines, and cloud deployments, with an emphasis on platform stability, application compatibility, and long-term maintenance. Security capabilities include SELinux mandatory access controls, auditing, cryptographic libraries, and integration with security-hardening and compliance tooling. Red Hat distributes security fixes through version-specific advisories and offers subscription-based support, updates, and extended-maintenance options for designated release streams.
GitHub is a proprietary software development and collaboration platform owned by Microsoft, centered on hosting Git repositories. It supports public and private source-code management, collaborative development, issue tracking, code review, and software distribution. GitHub Actions provides workflow automation for continuous integration, delivery, testing, and repository maintenance. The platform also offers repository wikis, Gists, code search, APIs, and integrations authenticated through tokens, SSH keys, and application permissions. GitHub is widely used for open-source collaboration and enterprise development; compromised accounts, repositories, or workflows can expose source code and secrets or facilitate software supply-chain attacks.
Google Chrome is a proprietary, free-of-charge web browser developed by Google for desktop and mobile operating systems. Built primarily on the Chromium project, it provides access to websites and web applications, with Blink rendering and the V8 JavaScript engine on desktop and Android platforms. Chrome supports browser extensions, installable Progressive Web Apps, developer tools, and user profiles that maintain browsing history, cookies, saved credentials, and other settings. Security capabilities include sandboxed execution, automatic updates, phishing and malware protection, and credential-protection mechanisms such as App-Bound Encryption on supported Windows installations. Enterprise policies allow administrators to manage browser configuration, extension deployment, and privacy-related behavior.
PowerShell is Microsoft's command-line shell, scripting language, and task-automation framework for system administration and configuration management. Built on .NET, it uses an object-based pipeline and commands called cmdlets to inspect and manipulate operating-system resources, applications, and services. Modern PowerShell is open-source and runs on Windows, Linux, and macOS; Windows PowerShell 5.1 is the older Windows-specific edition, with compatibility differences that can affect scripts and modules. PowerShell supports local and remote administration, file-integrity checks, scheduled-task management, security configuration, and automated deployment. Its access to .NET and Windows management interfaces also makes it a frequent target for living-off-the-land abuse, including obfuscated script execution, payload retrieval, in-memory loading, persistence configuration, and security-setting modification. These malicious uses do not make PowerShell itself malware.
Android is a Linux-based operating system and application platform led by Google, primarily used on smartphones and tablets, with variants for televisions, vehicles, and wearable devices. Its foundation is the Android Open Source Project (AOSP), which manufacturers customize for their hardware; many commercial devices additionally include proprietary Google applications and services. Android provides a managed application runtime, touchscreen interface, connectivity services, and security controls including application sandboxing, permissions, encryption, verified boot, and security updates. Supported devices and Google applications also provide protections against malicious applications, phishing, fraudulent communications, and sensitive-information exposure. Security-feature availability varies by operating-system version, device manufacturer, application, region, and configuration.
Brave is a privacy-focused, open-source web browser developed by Brave Software and built on Chromium. Available for desktop and mobile platforms, it combines Chromium's rendering engine, process isolation, and web compatibility with integrated protections against advertising, tracking, and browser fingerprinting. Its Shields controls let users configure privacy protections and website permissions. Brave supports browser extensions, password management, bookmarks, history, and other standard browsing functions, and includes the Leo AI assistant. Like other browsers, it maintains sensitive profile data, including saved credentials, cookies, and session information, which can be targeted by information-stealing malware following endpoint compromise.
Microsoft Teams is a proprietary communication and collaboration platform developed by Microsoft and integrated with Microsoft 365. It combines individual and group messaging, team-based channels, voice and video calls, online meetings, and collaborative file access. Integration with SharePoint, OneDrive, Outlook, and Microsoft Entra ID supports document collaboration, meeting scheduling, and organizational identity management. Teams supports communication with external participants through configurable guest and external-access capabilities, alongside application integrations and administrative controls. It is available through desktop, web, and mobile clients, with functionality varying by subscription and organizational policy.
AbiWord is a lightweight, open-source word processor for creating, editing, and formatting text documents. It supports common word-processing functions, including character and paragraph formatting, tables, images, styles, and spell checking. Import and export filters provide interoperability with document formats such as Microsoft Word, OpenDocument Text, and Rich Text Format. Its extensible architecture supports additional functionality through plugins. AbiWord has been distributed for multiple operating systems, including Linux and Windows, although platform support varies by release.
Windows Server is Microsoft's family of server operating systems built on Windows NT for enterprise infrastructure, application hosting, and network services. It provides server roles for identity and access management through Active Directory Domain Services, file sharing over SMB, web hosting, remote desktop services, and network authentication. Windows Server supports centralized administration and security policy enforcement through Group Policy and PowerShell, as well as virtualization through Hyper-V. It serves as a platform for enterprise applications such as Microsoft Exchange Server and supports physical, virtualized, and cloud deployments. Available roles, security capabilities, and deployment options vary by release and edition.
Python is a high-level, general-purpose programming language and runtime ecosystem used for automation, application development, scientific computing, machine learning, and security tooling. It emphasizes readable syntax and supports procedural, object-oriented, and functional programming styles. Its reference implementation, CPython, compiles source code into bytecode executed by an interpreter and integrates with native libraries and extensions. Python runs on Windows, macOS, Linux, and other platforms, with an extensive standard library and third-party package ecosystem. Its capabilities make it widely used for both defensive security tools and offensive scripts; executing untrusted code or deserializing unsafe objects can compromise the hosting process.
Microsoft 365 is Microsoft's subscription-based productivity and collaboration suite, combining Office applications with cloud services for email, document storage, communication, and organizational administration. It includes offerings such as Word, Excel, PowerPoint, Outlook, Exchange Online, SharePoint Online, OneDrive, and Teams, with availability depending on the subscription plan. Organizational environments are administered as tenants, with Microsoft Entra ID providing identity and access management. Microsoft Graph exposes APIs for authorized access to mail, calendars, files, collaboration resources, and directory information. Business and enterprise plans provide varying levels of centralized administration, endpoint management, security, auditing, and compliance capabilities.
AUTOMATIC1111 Stable Diffusion WebUI is an open-source, self-hosted web interface for generating and editing images with Stable Diffusion models. Implemented primarily in Python with a Gradio-based interface, it supports text-to-image generation, image-to-image transformation, inpainting, outpainting, and image upscaling. Users can configure model checkpoints, prompts, sampling methods, seeds, and other inference parameters. An extension system adds integrations and specialized workflows, while an optional HTTP API enables programmatic access. It typically runs on a local workstation or server using compatible GPU acceleration.
iOS is Apple's proprietary mobile operating system for the iPhone. Built on Darwin and the XNU kernel, it provides a touch-based interface, application runtime, networking, communications, and integration with Apple services. Its security architecture combines application sandboxing, mandatory code signing, secure boot, hardware-backed data protection, and tightly controlled application distribution. iOS supports passkeys, biometric authentication on compatible devices, enterprise mobile device management, and Lockdown Mode for users at elevated risk of targeted attacks. Apple distributes operating-system and security updates, with feature availability varying by device, release, and region.
Firefox is a free, open-source web browser developed by Mozilla for accessing websites and running web applications. Its desktop and Android versions use Mozilla’s Gecko rendering engine and SpiderMonkey JavaScript engine, supporting modern web standards, WebAssembly, and WebRTC. Firefox provides tabbed browsing, privacy and tracking protections, password management, browser-data synchronization, developer tools, and customization through WebExtensions. Its security architecture includes process isolation, sandboxing, and same-origin policy enforcement. Browser profiles retain browsing history, cookies, saved logins, and other user data, making them relevant to digital forensics and a target for credential-stealing malware.
Microsoft Edge is a web browser developed by Microsoft for accessing websites and web applications. Current versions are based on Chromium and support browser extensions, user profiles, and storage of browsing history, cookies, saved credentials, and autofill data. Edge includes Internet Explorer mode on Windows for compatibility with legacy enterprise applications, headless operation for automation, and enterprise policy controls supported by Microsoft security baselines.
WordPress is an open-source, PHP-based content management system for creating and administering websites and blogs, using MySQL or MariaDB for data storage. It provides browser-based administration, block-based content editing, publishing workflows, media management, comments, and role-based access controls. Themes control presentation, while plugins extend functionality for applications such as e-commerce, booking, and membership management. REST API and XML-RPC interfaces support integrations and programmatic access. WordPress can be self-hosted or deployed through managed hosting services. Its security depends on maintaining the core software, themes, plugins, and underlying server dependencies.
Ubuntu is a Debian-derived Linux operating system developed by Canonical and the Ubuntu community. It provides desktop, server, and cloud environments built around the Linux kernel, GNU utilities, and a large collection of software packages. Ubuntu uses APT and Debian-format packages for software management and also supports Snap packages. Its release model includes regular releases and Long Term Support (LTS) releases with extended maintenance lifecycles. Ubuntu is widely deployed on physical servers, virtual machines, cloud infrastructure, and developer workstations, and is commonly used as a container base image.