Blog

Featured

A Five-Point Security Checklist for the Multi-Agent Future

AI agents are moving fast and security is scrambling to catch up. This post breaks down why static policies aren't enough, and gives security leaders a checklist to get ahead of the exposure.

Read article

Explore Perspectives

Supply Chain Attacks Don't Need Zero-Days, And Your ASM Program Can't Keep Ignoring That

Five supply chain campaigns. One has a CVE. The other four? Completely invisible to your vuln management program. And they're still your problem.

Joe Silva
February 17, 2026
Notepad++: A Harsh Lesson in Supply Chain Failures

What failed in the update process, why CVEs didn’t tell the full story, and how runtime visibility helps security teams spot real exploit risk.

Team Spektion
February 9, 2026
Same CVE, Different Risk: Why Runtime Context Changes Everything

A deep dive into how runtime evidence transforms vulnerability prioritization.

Joe Silva
February 4, 2026
Beyond CVE Counts: Detecting Real-World Risks in PDF Editors

PDF editors with zero CVEs can be just as dangerous as those with dozens. Our research shows why organizations need runtime behavioral monitoring, not just CVE tracking.

Team Spektion
January 27, 2026
Runtime: The Foundation of Next-Generation Vulnerability Management

Learn what “runtime” means for vulnerability management and how runtime telemetry shows which vulnerabilities are truly exploitable, not just theoretically present.

Josh Skorich
January 21, 2026
Your Scanner Found 50,000 Vulnerabilities. Most Don't Matter.

Why traditional vulnerability management creates the illusion of security while leaving teams drowning in noise, and why runtime context is the way out.

Team Spektion
January 8, 2026
Why Vulnerability Management Hasn’t Evolved and Why That’s a Problem

Get the summary of the Security Theater Podcast featuring two CISOs, Joe Silva & Kyle Bubp, discussing the limitations of current VM practices and the reasons to shift to real-time, behavioral context for true risk reduction.

Team Spektion
November 25, 2025
Unquoted Paths: The Decades-Old Flaw Still Enabling Hidden Code Execution

Unquoted paths (CWE-428) remain a hidden threat in today’s software. See how runtime visibility exposes what legacy vulnerability tools overlook.

Team Spektion
November 17, 2025
Exposure Management vs Vulnerability Management: The Evolution in Cyber Risk

See how exposure management reframes cyber risk and shifts the focus from CVEs to what’s truly exploitable right now.

Team Spektion
October 30, 2025
How Financial Institutions Can Use Runtime Monitoring To Meet Third-Party Guidance from the Federal Reserve, NYDFS, DORA, and NCUA

Learn how runtime monitoring helps banks and credit unions meet evolving third-party risk requirements from the Fed, NYDFS, DORA, and NCUA.

Joe Silva
October 29, 2025
AI-Powered Citizen Development Security Risks And How To Address Them

AI copilots and citizen development are creating untracked software inside enterprises. Learn how Spektion exposes hidden risks at runtime.

Joe Silva
October 16, 2025
The 250-Day Risk Window: How an AI PDF Editor Vulnerability Demonstrates the Public Directory Blind Spot

Discover how a 250-day AI PDF editor vulnerability exposed the risks of public directories, and why runtime visibility is key to closing blind spots.

Team Spektion
October 1, 2025
Breaking Through Data Silos: Real-Time Risk Clarity with Spektion’s Latest Release

New features enable faster workflows for security teams, audit-ready reports for leadership, and enhanced visibility to explore and act on risk.

Team Spektion
September 30, 2025
How to Assess Third-Party Software Security

A practical guide to evaluating third-party software risk before purchase, after deployment, and continuously at runtime.

Team Spektion
September 24, 2025
Patch Management vs Vulnerability Management: Why the Difference Matters

Learn how patch management & vulnerability management differ, what happens when no patch exists, & how security teams can move from staying “up to date” to reducing real-world risk.

Team Spektion
September 3, 2025
CTEM Program Visibility Gaps and How to Close Them at Runtime

Strengthen CTEM programs with runtime insights into software risk to reduce blind spots and exposure.

Joe Silva
August 27, 2025
There’s An Easier Way to Meet DORA ICT Third-Party Risk Requirements

Learn how continuous runtime monitoring simplifies DORA Chapter V compliance for banks, insurers, and other FSIs.

Joe Silva
August 25, 2025
The Behavioral Intelligence Revolution: How Runtime Data Is Reshaping Threat Management

Runtime visibility into software behavior is fundamentally changing how security teams identify and respond to threats, moving beyond signatures to true behavioral analysis.

Josh Skorich
August 20, 2025