The evolution of vulnerability management

Issue 3 2022 Cyber Security

Almost every category of cyberattack increased over the course of 2021. The number of encrypted threats spiked by 167%, ransomware rose by 105%, and intrusion attempts climbed by 11%. Cyber economy research giant Cybersecurity Ventures expects global cybercrime costs to grow by 15% per year, reaching $10.5 trillion USD by 2025.


Patrick Evans.

Despite this, a PWC survey of security and technology executives last year showed that only 55% of cybercrime victims believed they were ‘well prepared’ to address these breaches — and 45% weren’t.

Proactive threat intelligence

In today’s world, ‘well prepared’ will never mean ‘invulnerable’. Faced with such a rapidly evolving threat landscape, it’s virtually impossible to address every risk. In fact, The Cyber Security Intelligence Agency reports that only 50% of organisations are remediating fewer than 15.5% of their vulnerabilities monthly, says Patrick Evans, CEO of specialist cybersecurity solutions provider SLVA Cybersecurity. “IT managers are suffering from vulnerability fatigue. They’re caught in an infinite loop of testing and patching, draining resources and accumulating costs, often getting attacked through a vulnerability they were unaware of. Organisations must start moving away from trying to fix all vulnerabilities to focus on those that matter.”

Gartner’s Top 10 Security Projects for 2020-2021 report recommends risk-based vulnerability management: “Don’t try to patch everything; focus on vulnerabilities that are actually exploitable. Go beyond a bulk assessment of threats and use threat intelligence, attacker activity, and internal asset criticality to understand real organisational risks better.”

The use of vulnerability scanners is no longer sufficient, often overwhelming security specialists with the volume of vulnerabilities to remediate. “Not all detected vulnerabilities require immediate action,” says Evans. “Context is important. It’s not uncommon for organisations that take security seriously to use tools like vulnerability management, vulnerability prioritisation, breach and attack simulation, and pen testing, providing multiple vulnerability ratings that remain siloed. To be truly effective, a single, more comprehensive risk console is needed.”

New landscape, new solutions

An effective, comprehensive strategy today leverages threat intelligence and threat actor landscape to assign a tailored risk score to identified vulnerabilities.

To bring such a solution to local shores, SLVA Cybersecurity recently became the distribution partner and reseller for HivePro in South Africa. “With HivePro, security teams get a view of all their current approaches and where the top 15 percent of vulnerabilities lie so that they can prioritise those threats. Importantly, this happens on a continuous and evolving basis,” says Evans.

HivePro’s Uni5 uses the current known vulnerabilities and threats to provide a unified view of the true vulnerability risk in an organisation. It is the only vulnerability prioritisation technology that contextualises risk by checking the efficacy of an organisation’s compensatory controls, providing actionable intelligence for rapid vulnerability remediation.

Users see a combination of asset criticality, external threat context, internal compensatory control, and patch intelligence to proactively reduce their attack surface before it gets exploited.

Uni5 uses four different groups for risk scoring: The first shows severe risks that could affect the organisation’s most critical assets and require immediate patching, the second group contains moderate threats to critical assets, the third shows high risks to non-critical assets and, lastly, moderate risks to non-critical assets.

Uni5 also orchestrates patch and configuration management to fix vulnerabilities, taking threat priorities into account. “These strategies are the way forward for organisations looking to take their threat intelligence to the next level. Perfection might not be possible in today’s ever-changing threat landscape, but proactive protection is,” says Evans.

As HivePro’s local distribution partner, SLVA Cybersecurity provides a zero-cost proof of value to clients, providing an immediate snapshot of the top 15% of vulnerabilities that will place the business at risk. MSSPs, service providers and resellers can also partner with SLVA Cybersecurity to provide this solution to their clients.

Find out more at https://slva-cs.com/




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

2022 Cloud Security Report
Cyber Security IT infrastructure
The 2022 Cloud Security Report reveals how security executives and practitioners are using the cloud, how their organisations are responding to security threats in the cloud, and the challenges they are facing.

Read more...
Arcserve launches N Series appliances
IT infrastructure Cyber Security
Arcserve introduces N Series appliances offering enterprise-level integrated data protection, recovery and cybersecurity to allow customers to simplify their IT environments and secure data.

Read more...
Securing business information more important than ever
Cyber Security Products
SMBs need to operate safely within the physical and virtual boundaries created by work-from-home business practices, as well as in-office operations.

Read more...
Storage is essential for a comprehensive cybersecurity strategy
Integrated Solutions Cyber Security
Cyber resilience is the ability of an enterprise to limit the impact of security incidents by deploying and arranging appropriate security tools and processes.

Read more...
Malicious file protection for mobile devices
Cyber Security
The new version of Check Point Harmony Mobile, a mobile threat solution, can now block the download of malicious files to mobile devices, preventing file-based cyberattacks on organisations.

Read more...
Turnkey data loss prevention solution
IT infrastructure Cyber Security Products
Acronis’s expertise in data protection and the managed service provider market yields an innovative, fast-track approach for the prevention of catastrophic data leaks.

Read more...
The cybersecurity consolidation conundrum
Editor's Choice Cyber Security Healthcare (Industry)
Check Point discusses why less is sometimes more when it comes to securing your organisation from the innumerable cyberattacks happening every day.

Read more...
Companies continue to pay multiple ransom demands
News Cyber Security
Study reveals that 80% of companies that paid a ransom demand were hit again, nearly 50% reported paying a second ransom and nearly 10% paid a third time.

Read more...
DCC becomes sole Symantec distributor for South Africa
News Cyber Security
Drive Control Corporation (DCC) has been appointed the sole distributor for Symantec security solutions to the South Africa channel, and will now also be distributing Symantec into the SADC region.

Read more...
VMware enhances its lateral security for multi-cloud
Technews Publishing Cyber Security
Ahead of RSA Conference 2022, VMware introduced Contexa, VMware’s full-fidelity threat intelligence capability that observes the breadth of VMware’s network, endpoint, and user technologies.

Read more...