Security News > 2020 > April > Qualys VMDR: Discover, prioritize, and patch critical vulnerabilities in real time

VMDR continuously assesses these assets for the latest vulnerabilities and applies the latest threat intel analysis to prioritize actively exploitable vulnerabilities.

The reason is, if you look at the statistics over the last 10 years, you would see that the total number of vulnerabilities which get discovered in a year, maybe let's say 15,000 to 16,000 of vulnerabilities that are getting discovered, out of those vulnerabilities, only a handful, like 1000 vulnerabilities get exploited.

That means the fraction of vulnerabilities which are getting exploited are not more than 10 to 12%. Let's say that you have a thousand vulnerabilities in your organization, and even if you fixed 900 vulnerabilities, you cannot say that you have implemented vulnerability management effectively because the rest of the hundred vulnerabilities could be all the way more riskier than the 900 vulnerabilities that you fixed, and the rest hundred vulnerabilities that you left could be the vulnerabilities which are getting exploited in the wild.

Out of 1000 vulnerabilities, let's say, on the basis of external context, you are able to prioritize or filter out, 800 vulnerabilities and now you're left with 200 vulnerabilities.

On the basis of so many other internal context filters that are available with the VMDR concept and VMDR platform, you would be able to identify those vulnerabilities, those hundred vulnerabilities out of a thousand vulnerabilities, which you should pay immediate attention to.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/Ydl9ZaSOWZk/