The evolution of vulnerability management

Issue 3 2022 Cyber Security

Almost every category of cyberattack increased over the course of 2021. The number of encrypted threats spiked by 167%, ransomware rose by 105%, and intrusion attempts climbed by 11%. Cyber economy research giant Cybersecurity Ventures expects global cybercrime costs to grow by 15% per year, reaching $10.5 trillion USD by 2025.


Patrick Evans.

Despite this, a PWC survey of security and technology executives last year showed that only 55% of cybercrime victims believed they were ‘well prepared’ to address these breaches — and 45% weren’t.

Proactive threat intelligence

In today’s world, ‘well prepared’ will never mean ‘invulnerable’. Faced with such a rapidly evolving threat landscape, it’s virtually impossible to address every risk. In fact, The Cyber Security Intelligence Agency reports that only 50% of organisations are remediating fewer than 15.5% of their vulnerabilities monthly, says Patrick Evans, CEO of specialist cybersecurity solutions provider SLVA Cybersecurity. “IT managers are suffering from vulnerability fatigue. They’re caught in an infinite loop of testing and patching, draining resources and accumulating costs, often getting attacked through a vulnerability they were unaware of. Organisations must start moving away from trying to fix all vulnerabilities to focus on those that matter.”

Gartner’s Top 10 Security Projects for 2020-2021 report recommends risk-based vulnerability management: “Don’t try to patch everything; focus on vulnerabilities that are actually exploitable. Go beyond a bulk assessment of threats and use threat intelligence, attacker activity, and internal asset criticality to understand real organisational risks better.”

The use of vulnerability scanners is no longer sufficient, often overwhelming security specialists with the volume of vulnerabilities to remediate. “Not all detected vulnerabilities require immediate action,” says Evans. “Context is important. It’s not uncommon for organisations that take security seriously to use tools like vulnerability management, vulnerability prioritisation, breach and attack simulation, and pen testing, providing multiple vulnerability ratings that remain siloed. To be truly effective, a single, more comprehensive risk console is needed.”

New landscape, new solutions

An effective, comprehensive strategy today leverages threat intelligence and threat actor landscape to assign a tailored risk score to identified vulnerabilities.

To bring such a solution to local shores, SLVA Cybersecurity recently became the distribution partner and reseller for HivePro in South Africa. “With HivePro, security teams get a view of all their current approaches and where the top 15 percent of vulnerabilities lie so that they can prioritise those threats. Importantly, this happens on a continuous and evolving basis,” says Evans.

HivePro’s Uni5 uses the current known vulnerabilities and threats to provide a unified view of the true vulnerability risk in an organisation. It is the only vulnerability prioritisation technology that contextualises risk by checking the efficacy of an organisation’s compensatory controls, providing actionable intelligence for rapid vulnerability remediation.

Users see a combination of asset criticality, external threat context, internal compensatory control, and patch intelligence to proactively reduce their attack surface before it gets exploited.

Uni5 uses four different groups for risk scoring: The first shows severe risks that could affect the organisation’s most critical assets and require immediate patching, the second group contains moderate threats to critical assets, the third shows high risks to non-critical assets and, lastly, moderate risks to non-critical assets.

Uni5 also orchestrates patch and configuration management to fix vulnerabilities, taking threat priorities into account. “These strategies are the way forward for organisations looking to take their threat intelligence to the next level. Perfection might not be possible in today’s ever-changing threat landscape, but proactive protection is,” says Evans.

As HivePro’s local distribution partner, SLVA Cybersecurity provides a zero-cost proof of value to clients, providing an immediate snapshot of the top 15% of vulnerabilities that will place the business at risk. MSSPs, service providers and resellers can also partner with SLVA Cybersecurity to provide this solution to their clients.

Find out more at https://slva-cs.com/




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Governing cybersecurity from the top as a strategic business enabler
Cyber Security
C-Suite executives still do not take cybersecurity seriously enough, while boards are not nearly as engaged in cybersecurity as they are in other areas of oversight.

Read more...
It is time to take a quantum leap in IoT cybersecurity
Drive Control Corporation Cyber Security
IoT has become integrated everywhere, including enterprises. While it offers many benefits, such as increased productivity and the rollout of mission critical applications, it can also lead to (enterprise) cyber-attack vulnerabilities.

Read more...
What to do in the face of growing ransomware attacks
Technews Publishing Cyber Security Security Services & Risk Management
Ransomware attacks are proliferating, with attackers becoming more sophisticated and aggressive, and often hitting the same victims more than once, in more than one way.

Read more...
Can we reduce cyberattacks in 2023?
Cyber Security
Zero-trust cybersecurity strategy with simplicity and risk reduction at the heart is mandatory to reduce exponential cyberattacks in 2023, says GlobalData.

Read more...
Key success factors that boost security resilience
Cyber Security
Adoption of zero trust, secure access service edge and extended detection and response technologies, all resulted in significant increases in resilient outcomes, as are executive support and cultivating a security culture.

Read more...
Enterprise threats in 2023
News Cyber Security
Large businesses and government structures should prepare for cybercriminals using media to blackmail organisations, reporting alleged data leaks, and purchasing initial access to previously compromised companies on the darknet.

Read more...
CA Southern Africa unmasks container security
Technews Publishing IT infrastructure Cyber Security
Adoption of software containers has risen dramatically as more organisations realise the benefits of this virtualised technology.

Read more...
Shifts in threat landscape to industrial control systems
Cyber Security
Kaspersky’s ICS CERT researchers’ predictions include increased attack surface due to digitisation, activities of volunteer and cybercriminal insiders, ransomware attacks on critical infrastructure as well as the technical, economic and geopolitical effects, and the rise of potential vulnerabilities being exploited by attackers.

Read more...
Advanced persistent cybercrime
Cyber Security
FortiGuard Labs predicts the convergence of advanced persistent threat methods with cybercrime. Advanced persistent cybercrime enables new wave of destructive attacks at scale, fuelled by Cybercrime-as-a-Service.

Read more...
Digital razor wire: sharpening endpoint protection
Cyber Security
Crypto-mining, hacking, vulnerabilities, and threats – protecting the organisation’s endpoints has never been more important than it is today, says Reggie Nkabinde, consultant: modern platform-security at Altron Karabina.

Read more...