QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Brightwater's emergency response to CVE-2026-41207, an unauthenticated remote-code-execution flaw in the Emberlog library: triaged as critical because it is KEV-listed with an EPSS of 0.94 even though its CVSS is lower than a quieter bug; pushed through the emergency funnel — trigger, triage, exposure across 40 services and 2,140 hosts, mitigation with WAF rules and a config flag, a hunt that found one prior hit and handed off to incident response, a canary-and-rings patch, verification by re-scan, and three playbook fixes; and the clock from advisory to verified closure.
CY-MID-108Mid Level · Zero-Day Response

Zero-Day & Critical Vulnerability Response — The Emergency Funnel

A hands-on mid-level course that runs the emergency playbook for the day a critical, often actively-exploited vulnerability drops in software you already run. Work the emergency funnel across eight stages - Trigger, Triage, Exposure, Mitigate, Hunt, Patch, Verify, and Learn - responding fast on facts but proving closure, with real advisory intake, KEV/EPSS triage, SBOM/CMDB exposure sweeps, WAF and config mitigation, IOC hunting, expedited patch rollout, and re-scan verification. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Watch every major advisory source and decide, fast and deliberately, what constitutes a real emergency.
  • Triage a new critical advisory accurately using CVSS, KEV, and EPSS together, not severity alone.
  • Sweep the whole estate for every affected instance and deploy compensating controls within hours.
  • Hunt for prior exploitation, roll out the real fix through an expedited process, and verify closure by proof.

Price:৳8,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.