3 pieces by Hana Kobayashi.
For the first time in the DBIR’s history, exploiting vulnerabilities is the leading way attackers get in. A look at what drove the shift, why faster patching alone won’t close the gap, and where exposure management should focus.
For about a day, it looked as if the system that names and tracks vulnerabilities would lose its funding. The contract was extended, but the scare exposed how many programs depend on a single upstream source. Here’s how to build in resilience.
VPN gateways, firewalls and management consoles produced the year’s most consequential exploitation. A review of the 2024 pattern, why conventional vulnerability programs under-weight these devices, and how to rebalance.