Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Black Hat USA
August 1-6, 2020
Las Vegas, NV, USA
Black Hat Asia
September 29 - October 2, 2020
Singapore
Black Hat Europe
November 9-12, 2020
London UK
10/22/2018
12:00 PM
Chris Pace, Technology Advocate, EMEA, Recorded Future
Chris Pace, Technology Advocate, EMEA, Recorded Future
Event Updates
50%
50%

The Patching Paradox: A Path to Intelligent Vulnerability Management

Imagine: You're out at sea, sailing through treacherous and uncharted waters. The tips of sharp rocks jutting from the waves give some forewarning of danger, but beneath the surface, twisting reefs and shallow sandbanks threaten to run you aground.

Imagine: You’re out at sea, sailing through treacherous and uncharted waters. The tips of sharp rocks jutting from the waves give some forewarning of danger, but beneath the surface, twisting reefs and shallow sandbanks threaten to run you aground.

As you desperately bail saltwater from the hold and look for ways to patch the holes, you cannot help but lament your fate. You realize, would have been to hire the best sailors and chart your course ahead of time. After all, you would have never come this way if you’d known these waters held so much danger.

In cybersecurity, there’s no such luck as an unsinkable ship or a map that marks all the hazards. The current is always changing and new threats come as quickly as a summer tsunami. This means that the most effective way to improve your security posture is to focus on identifying the risks that will actually affect your organization, and then prioritize patching the associated vulnerabilities.

The Most Dangerous Rock Is the One You’re Sailing Toward

In theory, the best way to stay protected is to keep every system you use up to date by patching every vulnerability as soon as it’s identified and always using the newest software. In practice, this “patch everything, everywhere” approach is almost impossible to sustain. Even though any one organization will only use software that represents a small proportion of this number, any cybersecurity team that tries to keep their systems completely up to date day after day will find themselves overburdened and unable to do any other work.

The obvious conclusion is to prioritize patching the vulnerabilities that put your organization at the most risk. But quantifying that risk is not as easy as focusing on vulnerabilities with the highest severity score. It’s not the zero-day exploits that nobody has a defense against or some other clever new threat that does the most damage, but vulnerabilities that people know about but just haven’t gotten around to patching.

Open Waters

Deciding how to respond to threats needs to be based on real risks supported by good data. Use automated vulnerability management tools to quickly identify which parts of your system need critical care, and then prioritize those vulnerabilities with threat intelligence that tells you which vulnerabilities are actually most liable to be exploited.

To learn more about how external threat intelligence can help your organization uncover the vulnerabilities in your system that threat actors could be exploiting right now, download our free white paper, “Vulnerability Intelligence From the Dark Web: The Disclosure to Exploit Risk Race.”

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 8/10/2020
Pen Testers Who Got Arrested Doing Their Jobs Tell All
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/5/2020
Researcher Finds New Office Macro Attacks for MacOS
Curtis Franklin Jr., Senior Editor at Dark Reading,  8/7/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-17448
PUBLISHED: 2020-08-11
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension.
CVE-2020-17466
PUBLISHED: 2020-08-11
Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redirect responses.
CVE-2020-11552
PUBLISHED: 2020-08-11
An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associated with a Certificate dialog. This vulnerability could allow an unauthenticated attacker to escalate privileges on a Windows host. An attac...
CVE-2020-13124
PUBLISHED: 2020-08-11
SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operating system.
CVE-2020-15597
PUBLISHED: 2020-08-11
SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field.