Meet AttackerKB, Rapid7's Crowdsourced Vulnerability Knowledge Base

guest · Apr 15, 2020

Meet AttackerKB, Rapid7's Crowdsourced Vulnerability Knowledge Base
April 15, 2020
https://www.securityweek.com/meet-attackerkb-rapid7s-crowdsourced-vulnerability-knowledge-base

Rapid7 has launched an open beta of AttackerKB, a community-sourced knowledge base of the latest vulnerabilities. Its purpose is to provide a central repository of information on vulnerabilities to help defenders understand and triage threats.

Announcing the beta version in January 2020, Rapid7's Metasploit R&D manager Caitlin Condon, blogged, "When a new vulnerability prompts discussion on Twitter or hits media outlets, the security community collectively participates in a familiar triage process: Is the bug pervasive, exploitable, or both? Is it worth dropping everything to patch or mitigate? [...]"
The problem for corporate security teams is that this vital discussion is dispersed and fragmented across Twitter, individual blogs, news outlets and other media.

The response was AttackerKB -- effectively a marketplace for the community of researchers and hackers to discuss and evaluate threats, and provide a central source of knowledge to security teams for their own time-critical decisions.
Click to expand...

AttackerKB's primary purpose is to help security teams sift through the huge volume of new vulnerabilities discovered every year.

"We're excited to collaborate with folks from every part of this industry," blogged Condon, "to boost signal, stomp out noise, and highlight the hot takes and measured technical assessments that, together, do the necessary (and sometimes messy!) work of moving this industry forward."
Click to expand...

Rapid7: Meet AttackerKB

Knowledge is most powerful when it’s shared, so today we’re making AttackerKB available to the broader security community as an open beta.

AttackerKB is still in development, so expect frequent change and lots of discussion. We value extensibility and bake it into our work wherever possible. To this end, AttackerKB includes an open API (read-only for now) to enable users to experiment with vulnerability assessment data and tooling implementation themselves.
Click to expand...

Log in or Sign up

Meet AttackerKB, Rapid7's Crowdsourced Vulnerability Knowledge Base

guest Guest

Log in or Sign up

Meet AttackerKB, Rapid7's Crowdsourced Vulnerability Knowledge Base

guest Guest

Useful Searches