Loading story…
Effective patch management and vulnerability management are critical components of a robust cybersecurity strategy for organizations. Patch management involves the systematic identification, testing, and deployment of software updates to address known vulnerabilities, reduce exposure to exploits, and maintain system stability. A well-defined patch management policy ensures that updates are applied consistently, roles and responsibilities are clear, and compliance requirements are met. In contrast, vulnerability management encompasses a broader process of identifying, analyzing, prioritizing, and remediating weaknesses across the IT environment, including misconfigurations, outdated software, and missing patches. Both processes must work in tandem to minimize risk and prevent attackers from exploiting known flaws.
Recent research highlights that overlooked devices such as multifunction printers (MFPs) can significantly expand an organization's attack surface if not properly managed. Many MFPs are deployed without adequate patch cycles, password changes, or network segmentation, making them attractive targets for attackers seeking credential theft or lateral movement. Penetration testing data confirms that default settings and inconsistent patch management practices leave these devices vulnerable, underscoring the importance of integrating all networked assets into comprehensive patch and vulnerability management programs.
Map this exposure pattern across your cloud, code, and identities.
1 event from the most recent confirmed update back to the earliest known activity.
Rapid7 published research describing widespread security weaknesses in enterprise multifunction printers, including default settings, weak authentication, poor patch management, and internet exposure. The report also introduced the Praeda-II tool and documented how these issues can enable credential theft, data leakage, and lateral movement.
See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.
3 references tracked. Mallory keeps watching after this page renders.
blog.comodo.com
Open sourceblog.comodo.com
Open sourcerapid7.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Organizations are facing increased cybersecurity risks due to the rapid expansion of their digital infrastructure, including cloud platforms, mobile devices, IoT, and third-party integrations. As the attack surface grows, maintaining visibility and control becomes more difficult, making proactive strategies like attack surface management and continuous threat exposure management essential. Security teams are urged to adopt structured, ongoing approaches to identify and remediate vulnerabilities before they can be exploited, with a particular emphasis on the importance of effective cloud security architecture and the challenges of managing multi-cloud environments. A critical aspect of reducing enterprise risk is ensuring that all software, especially third-party applications, is regularly patched to address known vulnerabilities. Unpatched software on everyday work devices remains a significant entry point for attackers, as cybercriminals actively exploit outdated applications and operating systems. Best practices for cloud and multi-cloud security, including centralized authority, unified policies, and comprehensive patch management, are recommended to build a resilient security posture and protect against evolving threats.
Jun 29, 2026
Organizations are facing increasing challenges in managing cybersecurity risks due to fragmented vulnerability management tooling, rising backlogs, and the need for continuous incident response. A recent report highlights that most companies use multiple detection tools, leading to difficulties in visibility, correlation, and prioritization of vulnerabilities. While many organizations have formal workflows and SLAs for remediation, the mean time to remediate critical issues remains high, with automation and integration of threat intelligence being key differentiators for faster response. Assigning remediation to cybersecurity or SOC teams, rather than infrastructure groups, has also been shown to improve response times. At the same time, the evolving threat landscape has made 24/7 incident response a necessity, as attackers leverage automation and global infrastructure to target organizations at all hours. Relying solely on compliance frameworks is insufficient for real-world protection, as these standards often fail to address gaps exploited by attackers. Effective security now requires continuous monitoring, real-time awareness, and practiced incident response capabilities, moving beyond compliance as a baseline to proactive risk management and operational resilience.
Jun 29, 2026
Organizations are increasingly challenged by the risks posed by legacy systems, unmanageable devices, and unknown assets within their networks. Security leaders and experts emphasize the importance of comprehensive asset discovery and visibility as foundational steps to effective vulnerability management. Automated solutions that map infrastructure, including unauthenticated and legacy devices, are critical for identifying blind spots and prioritizing risk. Experts caution against over-reliance on traditional CVE-based tools, highlighting that many real-world breaches exploit default credentials, poor configurations, and unmanaged assets that may not appear in standard vulnerability reports. Rapid response capabilities, such as real-time intelligence and query-based searches, are recommended to quickly identify and mitigate zero-day exposures. In sectors like healthcare, the long lifecycle of medical devices presents unique challenges, as many systems cannot be patched or easily replaced. Security leaders advocate for network segmentation and close collaboration with vendors to manage these risks, while also promoting proactive, risk-based approaches that go beyond compliance checklists. Commentary from industry professionals underscores that legacy and unmanageable systems are often targeted by advanced persistent threats and botnets, with attackers leveraging automation and AI to exploit exposures. Addressing these challenges requires breaking down silos between IT, OT, and security teams, and adopting strategies that prioritize visibility, risk reduction, and continuous improvement across all assets.
Jun 29, 2026