#cvss

1. CVE

The Common Vulnerabilities and Exposures (CVE) program is a critical international cybersecurity initiative that serves as the global…

CVEs Explained: The Language of Cybersecurity Vulnerabilities

Let us start with a small story…

The ABCs of Cybersecurity: Everything You Need to Know About CVE, CWE, and CVSS

New vulnerabilities surface every single day. Thousands of them. Security teams, developers, and system administrators need to be speaking…

Your Security Team Is Patching the Wrong Vulnerabilities. The Data Is Unambiguous.

Around 20,000 CVEs were reported in 2021, but fewer than 5% of them were actually used to attack anything. Organizations that focused on…

Mastering CVE, CWE, CVSS, and NVD: A Practical Guide for Modern Cybersecurity

Cybersecurity teams are flooded daily with alerts, advisories, patch releases, and vulnerability disclosures. Without standardized…

Security Assessment with Trivy: From Vulnerability Detection to Remediation

Goal: Establish a systematic vulnerability assessment workflow for my Docker infrastructure and host system using Trivy, covering…

Not All Vulnerabilities Are Equal: Understanding CVSS the Right Way

Introduction

CVSS v4.0: The Practical Field Guide for Vulnerability Management

From a number that nobody trusts to a tool that changes how you work

How I Found a Million Dollars’ Worth of Unlocked Doors

What started as curiosity after a disappointing test result turned into a 145MB data exposure, a fully bypassable proctoring system, and a…

TruRisk™ : Qualys’ Approach for Prioritizing Asset for Patch Management

VPR : Tenable’s Predictive Approach for Vulnerability Prioritization

As we previously disscussed, the Common Vulnerability Scoring System (CVSS) is the industry standard framework used to measure the…

The CVSS Illusion: Why Your Vulnerability Prioritization Strategy Is Probably Getting People Hacked

And what the organizations that actually get this right are doing instead.

What is CVE? A Quick Look at Cybersecurity Vulnerabilities and Concepts: CVE, CVSS, CWE

Hello! In this article, we will discuss the commonly encountered CVE concept in the cybersecurity world, what CVE identifiers mean, and…

CVE Nedir? Siber Güvenlik Açıkları ve CVE, CVSS, CWE Kavramlarına Hızlı Bir Bakış

Merhaba! Bu yazıda siber güvenlik dünyasında sıkça karşılaştığımız CVE kavramını, CVE numaralarının ne anlama geldiğini ve ilgili diğer…

Understanding Common Vulnerability Scoring System, CVSS

How to Prioritize Kubernetes Security Risk?

This is not a beginner’s blog post. As such, we will not tell you about the importance of securing your Kubernetes infrastructure (it’s…

What’s Missing in Your Vulnerability Management Strategy? Exploring CVSS, EPSS, KEV, and Beyond.

Which vulnerabilities are crucial for your organization, and how do you prioritize them? As we use more technology, finding and fixing…