Security News > 2021 > October > Combating vulnerability fatigue with automated security validation

Dealing with a problem with the wrong toolset leads to reverse evolution - as we can see in the vulnerability management market, where tools are becoming more of a distraction to security professionals than the insightful guide to better security that they promise to be.

Legacy vulnerability management tools flood security teams with long lists of community prioritized vulnerabilities - there were more than 15,000 vulnerabilities found only in 2020.

Without the ability to determine which vulnerabilities are most likely to be exploited by attackers, security teams are playing a never-ending game of patching whack-a-mole - when one vulnerability gets found and added to queue for patching, another pops up.

This is why legacy vulnerability assessment with an agent-dependent architecture is no longer enough - leading CISOs are embracing a broader, comprehensive approach to automated security validation, which requires a real-life look at how an attacker will approach your environment.

Security controls efficacy - Yet again, vulnerability as the goal falls short leaving security teams with empty hands to take an action under-confidently answer the question of readiness against an attack.

Enabling security teams to get ahead of the vulnerability curve by zeroing in on the vulnerabilities that matter the most can expose the true root-cause of the problem.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/3yd9F-z3TEw/