Sign up to save your podcasts
Or
Share The Simple Mistakes and Complex Seeds of a Vulnerability Management Program - Emily Fox - ASW #275
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
The Simple Mistakes and Complex Seeds of a Vulnerability Management Program - Emily Fox - ASW #275
The need for vuln management programs has been around since the first bugs -- but lots of programs remain stuck in the past. We talk about the traps to avoid in VM programs, the easy-to-say yet hard-to-do foundations that VM programs need, and smarter ways to approach vulns based in modern app development. We also explore the ecosystem of acronyms around vulns and figure out what's useful (if anything) in CVSS, SSVC, EPSS, and more.
Segment resources:
- https://www.redhat.com/en/blog/patch-management-needs-a-revolution-part-1
- https://next.redhat.com/blog/
- https://www.first.org/cvss/v4-0/
- https://www.first.org/epss/
- https://deadliestwebattacks.com/appsec/2010/02/19/primordial-cross-site-scripting-xss-exploits -- For a bit of history, one of the earliest "bugs bounty" from 1995.
Show Notes: https://securityweekly.com/asw-275
View all episodes
By Security Weekly Productions
4.7
3535 ratings
The need for vuln management programs has been around since the first bugs -- but lots of programs remain stuck in the past. We talk about the traps to avoid in VM programs, the easy-to-say yet hard-to-do foundations that VM programs need, and smarter ways to approach vulns based in modern app development. We also explore the ecosystem of acronyms around vulns and figure out what's useful (if anything) in CVSS, SSVC, EPSS, and more.
Segment resources:
- https://www.redhat.com/en/blog/patch-management-needs-a-revolution-part-1
- https://next.redhat.com/blog/
- https://www.first.org/cvss/v4-0/
- https://www.first.org/epss/
- https://deadliestwebattacks.com/appsec/2010/02/19/primordial-cross-site-scripting-xss-exploits -- For a bit of history, one of the earliest "bugs bounty" from 1995.
Show Notes: https://securityweekly.com/asw-275
More shows like Security Weekly Podcast Network (Video)
View all
Security Now (Audio)
2,009 Listeners
RunAs Radio
83 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
651 Listeners
Network Break
101 Listeners
CyberWire Daily
1,020 Listeners
Security Weekly News (Audio)
33 Listeners
The Matt Walsh Show
28,411 Listeners
CISO Series Podcast
189 Listeners
Cyber Security Headlines
139 Listeners
Morning Wire
26,611 Listeners