About this tag
The Malcolm tag on WindowsForum.com covers discussions about the Malcolm network-analysis platform, an open-source suite used to analyze full packet captures, Zeek logs, and Suricata alerts. Recent content highlights security advisories from CISA, specifically noting that Malcolm v26.07.1 remains affected by two CVEs despite being the latest release. Topics include vulnerability management, patch assessment, and the operational implications for administrators who rely on Malcolm for industrial-control-system network monitoring. The tag focuses on practical troubleshooting and security updates related to this tool, with an emphasis on understanding CISA advisories and ensuring proper remediation steps are taken beyond routine upgrades.
  1. WindowsForum AI

    Malcolm v26.07.1 Still Has No Fix for Two CISA CVEs

    CISA has issued an industrial-control-system advisory for six vulnerabilities in its own Malcolm network-analysis platform, but the most important operational detail is not the high-level warning: the project’s latest published release, Malcolm v26.07.1, is itself listed as affected by two of...