Blog

Fix now: High risk vulnerabilities at large, May 2020

12.May.2020

Simon Roe, Product Manager Outpost24

In the world of vulnerabilities, we have seen a few interesting ones released in the last couple of weeks since our last Farsight risk based vulnerability management blog. Various countries cyber security departments are warning citizen’s and business of the increase in phishing attack targeting people’s natural curiosity and fear surrounding COVID-19.

Fix now: High risk vulnerabilities at large, April 2020

22.Apr.2020

Simon Roe, Product Manager Outpost24

With much of the world in lockdown, and many of us on enforced work from home measures due to COVID-19, keeping on top of the latest vulnerabilities may have fallen off your radar. But as the pandemic has unleashed a wave of cyber attacks to exploit remote workers and scam anxious customers, strengthening your cyber hygiene should be a priority.

Risk based vulnerability management: reduce and prioritize remediation efforts with likelihood of an actual attack

23.Mar.2020

Simon Roe, Product Manager Outpost24

With too many vulnerabilities to deal with and too little time (and resource) all you need is perspective. As Gartner put it nicely ‘a vulnerability is only as bad as the threat exploiting it and the impact on the organization’, the trick here is to prioritize remediations with a framework that focus on likelihood of an actual attack rather than perceived risk

What’s in a risk score? Implementing a Risk based remediation strategy using machine learning

17.Mar.2020

Simon Roe, Product Manager Outpost24

The biggest challenge for vulnerability management today lies in prioritization. With organizations being pressured on time and resources to effectively remediate vulnerabilities, it’s important to turn to a risk-based remediation strategy. With Outpost24 Farsight we provide organizations the ability to do just that.

Predicting the future: Will this vulnerability be exploited in the wild?

10.Mar.2020

Simon Roe, Product Manager Outpost24

Remember If only 10% of all vulnerabilities have exploits released, and of those, not all go onto being exploited in the wild, risk based vulnerability prioritization provides a risk indicator of those vulnerabilities that are likely to be exploited in the future. The value it brings to security teams is huge – they will not only save time and effort in patching vulnerabilities that aren’t real, they will also reduce the time to patch for truly high risk vulnerabilities and prevent their business from potential attacks.

Risk Based Vulnerability Management – starting with the why

02.Mar.2020

Simon Roe, Product Manager Outpost24

In 2019 we saw a total of 12,174 new vulnerabilities being released. To put that into perspective, this equates to just over 33 new vulnerabilities being released EVERY SINGLE DAY of 2019. And this number was down on the year before (2018 – 16,556). This demonstrates the sheer volume of vulnerabilities security professionals have to deal with everyday which poses a significant challenge to say the least! How can machine learning be used to help us focus on the biggest risks?

When we dive deeper into those numbers, - 1,118 vulnerabilities had a CVSS score of greater than 8, and over half (7,197) had CVSS scores of greater than 5.