Matthew Arnow’s Post

Successful vulnerability management isn’t about addressing every vulnerability. Learn more below.

Veracode leaps forward in application risk management with the acquisition of Longbow Security! I'm excited to announce this strategic move that allows us to go beyond #AppSec and focus on normalizing and prioritizing findings like vulnerabilities, misconfigurations, overpermissioned accounts, data sensitivities, and IoCs. If you're an IDC #DevSecOps subscriber, don't miss out on Katie Norton's in-depth analysis of this acquisition. #LifeatVeracode

Successful vulnerability management isn’t about addressing every vulnerability. It’s about assessing, prioritizing, and mitigating the ones that pose the highest risk to your business. Learn more: https://bit.ly/3O44HIs #vulnerabilitymanagement #SOC #NonstopSecOps

Veracode leaps forward in application risk management with the acquisition of Longbow Security! I'm excited to announce this strategic move that allows us to go beyond #AppSec and focus on normalizing and prioritizing findings like vulnerabilities, misconfigurations, overpermissioned accounts, data sensitivities, and IoCs. If you're an IDC #DevSecOps subscriber, don't miss out on Katie Norton's in-depth analysis of this acquisition. #LifeatVeracode

Veracode leaps forward in application risk management with the acquisition of Longbow Security! I'm excited to announce this strategic move that allows us to go beyond #AppSec and focus on normalizing and prioritizing findings like vulnerabilities, misconfigurations, overpermissioned accounts, data sensitivities, and IoCs. If you're an IDC #DevSecOps subscriber, don't miss out on Katie Norton's in-depth analysis of this acquisition. #LifeatVeracode

Veracode leaps forward in application risk management with the acquisition of Longbow Security! I'm excited to announce this strategic move that allows us to go beyond #AppSec and focus on normalizing and prioritizing findings like vulnerabilities, misconfigurations, overpermissioned accounts, data sensitivities, and IoCs. If you're an IDC #DevSecOps subscriber, don't miss out on Katie Norton's in-depth analysis of this acquisition. #LifeatVeracode

Veracode leaps forward in application risk management with the acquisition of Longbow Security! I'm excited to announce this strategic move that allows us to go beyond #AppSec and focus on normalizing and prioritizing findings like vulnerabilities, misconfigurations, overpermissioned accounts, data sensitivities, and IoCs. If you're an IDC #DevSecOps subscriber, don't miss out on Katie Norton's in-depth analysis of this acquisition. #LifeatVeracode

Cyber attacks are on the rise, yet training is not always the priority for many employers, even with the most basic education in mitigating the risks. Please reach out to myself for further information on the below.

Just a small, minor observation from the events of last week. Where the fuck was the 'risk management'? I don't just mean at Clownshite. I mean EVERYWHERE. Every year, Beasley and Branson release a report that demonstrates that organisations all over the world don't care about risk management. ERM isn't happening or isn't valued. Why do you think that is? Is it because they realise that it's all fantasy bullshit? All your heatmaps, loss distribution curves and finger-paintings are all utter nonsense. You know it. They know it. You might as well climb and ancient Greek mountain and ask a drugged teenage girl what the future holds. That is how all this started, right? I have been arguing for YEARS that we need to separate security practice from risk management. I have a rational argument for WHY. And for years, I have been ignored. My position is a little bit too 'real' and raw for most people. Yeah, the people who prefer to bullshit are afraid of people who learned and understood. How real and raw was life last week? Just asking. I guarantee you, nobody learned anything from it. Read this if you want an alternative to playing with dice and bullshitting. https://lnkd.in/ezHJC72q

Is traditional vulnerability management failing us? Let's explore why and what organizations should be using instead. We're covering vulnerability scores, threat-based scores, risk-based scores and more. Let's dive in: https://lnkd.in/gpHrqvcY