What You Need to Know About Vulnerability Management

guest · Aug 26, 2019

What You Need to Know About Vulnerability Management
August 26, 2019
https://blog.rapid7.com/2019/08/26/...-need-to-know-about-vulnerability-management/

Our latest Summer Security Fundamentals training is a wrap, so we wanted to share with you what our expert panel discussed, including common vulnerability misconceptions and tips for creating a successful vulnerability management program, measuring real risk, and advocating for resources internally.

Vulnerabilities are often simply mistakes or bugs in the software that compromise confidentiality, information, or the availability of a resource (such as a website).
The success of a vulnerability management program boils down to software management. This requires being able to understand all the software in your environment along with the systems and services (and all of their versions), and comparing that to known vulnerabilities.
Click to expand...

guest · Jun 22, 2020

Vulnerability Management, Taking a Wide View
VM should be about so much more than just CVEs
June 21, 2020
https://medium.com/ochrona/vulnerability-management-taking-a-wide-view-7516f0e71a1e

What is Vulnerability Management?
We’ll start at the beginning. According to ISO 27002, a vulnerability is

A weakness of an asset or group of assets that can be exploited by one or more threats.
The SANS Institute goes on to summarize Vulnerability Management as

… the process in which vulnerabilities in IT are identified and the risks of these vulnerabilities are evaluated. This evaluation leads to correcting the vulnerabilities and removing the risk or a formal risk acceptance by the management of an organization.
In security our primary measure is “risk”, and our mandate is to understand, lessen, and control that risk.
Click to expand...

So with some of the tomes of the industry weighing in with such broad strokes, why does it often feel like the modern implementation of vulnerability management tools are so narrowly focused on vulnerability scanners, IP addresses, and CVEs as the archetypal entities? [...]
Click to expand...

guest · Jul 4, 2020

Vulnerability management explained
July 2, 2020
https://cybersecurity.att.com/blogs/security-essentials/vulnerability-management-explained

What is vulnerability management?
Every year, thousands of new vulnerabilities are discovered, requiring organizations to patch operating systems (OS) and applications and reconfigure security settings throughout the entirety of their network environment.
To proactively address vulnerabilities before they are utilized for a cyberattack, organizations serious about the security of their environment perform vulnerability management to provide the highest levels of security posture possible.

Vulnerability management is generally defined as the process of identifying, categorizing, prioritizing, and resolving vulnerabilities in operating systems (OS), enterprise applications (whether in the cloud or on-premises), browsers, and end-user applications. [...]
Click to expand...

Log in or Sign up

What You Need to Know About Vulnerability Management

guest Guest

guest Guest

guest Guest

Log in or Sign up

What You Need to Know About Vulnerability Management

guest Guest

guest Guest

guest Guest

Useful Searches