Action1’s Post

At Qualys #qscemea last week, we announced a get current campaign to help you align with the recent NCSC guidance which you can read here https://lnkd.in/eBTMvWWP NCSC recently released guidance recommending patching vulnerabilities for internet-facing services and software within five days and non-external-facing vulnerabilities within seven days. Many organizations find it challenging to accurately discover all their assets, specifically those that are internet-facing, efficiently measure and prioritize the risk, and then remediate it. Anonymized data from the Qualys Threat Research Unit (TRU) indicates the median time to remediate (MTTR) for the average UK organization was 17 days for external-facing vulnerabilities and 15 days for internal threats. Read our blog to find out more. #riskmanagement #rbvm #patching #assetmanagement

Swiftly detecting and remediating risks is the only way you can safeguard your network from growing threats. You can't do that with: -slow vulnerability scanners -ineffective siloed solutions Leverage SanerNow and Dominate Vulnerabilities before they become threats. More here: https://lnkd.in/gNgp7mSX #vulnerabilitymanagement #itsecurity #patchmanagement #cybersecurity #cyberattacks #secpod #informationsecurity

ReversingLabs' SAFE report brings visibility to software supply chain threats embedded within software components, including attack vectors beyond just vulnerabilities (malware, tampering, suspicious behaviors, & more) across the entire software binary. Read this RL Blog post to learn more about what RL Spectra Assure offers. #SoftwareSupplyChainSecurity #CyberRisk

ReversingLabs' SAFE report brings visibility to software supply chain threats embedded within software components, including attack vectors beyond just vulnerabilities (malware, tampering, suspicious behaviors, & more) across the entire software binary. Read this RL Blog post to learn more about what RL Spectra Assure offers. #SoftwareSupplyChainSecurity #CyberRisk

How Qualys Supports the National Cyber Security Centre (NCSC)’s Vulnerability Management Guidance: NCSC details the importance of having asset management and remediation as key requirements of a successful VM program. “A vulnerability management process shouldn’t exist in isolation. It is a cross-cutting effort and involves not just those working in IT operations, but also security and risk teams.” In its recent vulnerability management guidance, the UK’s National […]

If fully remediating every vulnerability isn't a feasible solution for your organization, here are 4 best practices to follow to make your systems more secure. 🎯 Set realistic timeframes for remediating vulnerabilities based on risk level 🤝 Align accountability and authority - those with the power to fix vulnerabilities should be the ones tasked with doing it 🔄 Continuously remediate (don't do it in batches) 🛠️ Equip your team with the resources and tools they need to uphold your remediation policy To learn more about vulnerability remediation and mitigation, take a look at our in-depth article on the realities of runtime application security here - https://hubs.ly/Q02vsvfY0 #vulnerabilityremediation #softwaresecurity

While most of our security programs are outward looking, it is important to remember that some incidents originate with malicious insiders, who due to their organizational knowledge and existing access, can cause major losses and damage. CERT SEI has released two new tools to help organizations assess their vulnerability to insider attacks and their measures to counter such attacks. Worth a look! https://bit.ly/3SWYBuB

🔬 📈 Vulnerability management comes down to math and risk management. Take a good, extended look at your computer. Think of all its components within its case, and then write a list of all the software applications installed on its hard drive. Each one of those items is a potential exploitable vulnerability to sensitive stored information that hackers leverage to commit their crimes. Last year, over 30,000 NEW vulnerabilities were published (17 per minute; 600 per week) that need to be mitigated. On average, hackers found a way to exploit 75% of newly identified vulnerabilities within 19 days of announcement. Patch management is critical to safeguard stored data. https://lnkd.in/gdGiSTDx

Great article with practical advice. Companies that are not proactive about addressing security vulnerabilities are ticking time bombs.