Best Practices

The vulnerability management lifecycle (VML) tracks a vulnerability from discovery to resolution by identifying system weaknesses, assessing their risk, applying fixes, and verifying successful remediation. It can take diligence to manage every stage of the process, so organizations committed to the model might wonder how to reconcile the VML with modern tools like CNAPPs, present…

In the alphabet soup of cybersecurity — ranging from SIEM (Security Information and Event Management) to IAM (Identity and Access Management), SOC (Security Operations Center), GRC (Governance, Risk, and Compliance), and others — DFIR stands out because it handles the post-compromise investigative response rather than preventive measures or policy frameworks. Do you need to add…

When it comes to vulnerability scanning, complexities have long made what might seem simple a complex, multi-layered endeavor. That doesn’t mean vulnerability scanning isn’t worthwhile or that it isn’t a foundational part of enterprise security. It just means that as IT environments evolve with ephemeral assets and cloud-native ecosystems, balancing security with efficiency must also…

Researchers, vendors, and security pros have disclosed more than 280,000 known common vulnerabilities and exposures (CVEs). But with this impossibly long list of priorities, how can teams know what’s truly important? After all, the “patch everything” approach is unscalable, and regardless, not all CVEs pose equal risks. Lack of prioritization also erodes confidence in teams…

It’s a challenge to stay on top of the proliferation of cloud security standards and frameworks today. In this article, we’ll cover the crucial foundations of cloud security standards, like what they are, how they differ, and what benefits and drawbacks you’ll encounter when adopting any framework. We’ll also dig deeper into the challenges that…

Sure, teams know they should be patching quickly. But patches aren’t always available for brand-new vulnerabilities, leaving teams to wonder whether it's practical to try to prevent these zero-day attacks. After all, zero-day attacks involve, by definition, vulnerabilities that have never been seen before and that organizations don’t know exist. We’ve already looked at what…

When the non-profit MITRE organization began compiling its compendium knowledge base called ATT&CK (Adversarial Tactics, Techniques, & Common Knowledge, pronounced ‘attack’) in 2013, it made cyber security attacks and vocabulary accessible free to government, enterprises, and the public looking to understand known behaviors — from the standpoint of adversarial behaviors. In this article we will…

When teams are interested in SBOMs for their asset and dependency tracking, they’ll look for formats that integrate smoothly with existing CI/CD pipelines, are easy to automate, and offer minimal disruption to workflows. However, multiple teams, all with different needs, are likely to put their own stamps on SBOMs, making consistency and sharing across organizations…

Cloud vulnerabilities are security weaknesses, such as misconfigurations or software bugs, that bad actors can exploit to breach or compromise cloud environments. While often viewed as less critical than a cloud security threat, vulnerabilities still require attention to proactively reduce the cloud attack surface and avoid potential breaches, such as unauthorized access. For example, if…

Increasingly complex cloud security threats and risks have led to a rise in cloud security tooling in recent years. However, increased tooling has also led to increased costs and manpower, leading many organizations to shift toward tool consolidation. In this article, we will dive into the rise of cloud-native application protection platforms (CNAPPs), the role…