Christopher Lau, MBA, CRISC, CISM, CDPSE’s Post

📊 MTTR: The Key Security Metric for 2024 & Beyond. Today, tools find vulnerabilities, but fixing them fast is the challenge. MTTR is the solution.   🔍 What's noise vs. real risk? 🛠️ Remediation dilemma. 🔒 Accelerate with strategy, not tasks. 📈 Measure MTTR for effective risk reduction.   Ready to fortify? Download the FREE paper now 👇🏻   https://hubs.la/Q02t3h2R0

📊 MTTR: The Key Security Metric for 2024 & Beyond. Today, tools find vulnerabilities, but fixing them fast is the challenge. MTTR is the solution.   🔍 What's noise vs. real risk? 🛠️ Remediation dilemma. 🔒 Accelerate with strategy, not tasks. 📈 Measure MTTR for effective risk reduction.   Ready to fortify? Download the FREE paper now 👇🏻   https://hubs.la/Q02t3h2R0

CVE count set to rise by 25% in 2024 The report from Coalition indicates an anticipated 25% rise in the total count of published common vulnerabilities and exposures (CVEs) for 2024, reaching 34,888 vulnerabilities, equivalent to approximately 2,900 per month

Customize your alerts to focus on what really matters for you and your business ⚙️ Whether it's being able to address critical vulnerabilities in your applications quickly or simply staying updated, we're here for you. Discover more about our new notification rules feature in the comments 👇

I've been keeping on eye on EPSS progress. Here is a nice summary of a recent report by FIRST. Worth a read if you're managing vulnerabilities in your organisation and looking for something to add into the mix with CISA KEV. https://lnkd.in/d3hWt_wk

Just finished the course “Learning the OWASP Top 10” by Caroline Wong! It gives a great insight on the vulnerabilities management and ways to avoid them #OWASP #secureWeb 

CVE Prioritizer is an open-source tool designed to assist in prioritizing the patching of vulnerabilities. It integrates data from CVSS, EPSS, and CISA’s KEV catalog to offer insights into the probability of exploitation and the potential effects of vulnerabilities on your systems. #CVE

The advisory highlights how developers can follow best practices to fix these vulnerabilities during production.

Overwhelmed by vulnerability notifications? You're not alone. Expel's MDR incidents provide rich data about the types of exploits threat actors are attempting and successfully leveraging. We gathered six months' worth of research and data to determine the riskiest vulnerabilities you should focus your remediation resources on 📊

Have you seen EXF yet? It helps you prioritise your vulnerability backlog with ease. Fix what matters as nobody can fix all vulnerabilities. Not only do you get false positive-free Vulnerability information but also a great way to focus on items to improve your security posture rapidly!! https://lnkd.in/e_nGHN9G