Author Bio

If you’ve worked in operational security handling vulnerability management, I’m sure you’ve found yourself in this situation. You’ve also seen it played out time and time again if you’ve worked for a company that sells a VM scanner. You’re sitting in the Captain’s chair and the red lights start flashing. The next big “named” vulnerability…

Vulnerability remediation is the patching or fixing of cybersecurity weaknesses that are detected in enterprise assets, networks and applications. Formerly a manual process, vulnerability remediation today is more automated, with advanced data science, threat intelligence, and predictive algorithms helping to determine which vulnerabilities should be remediated first.  Taking a risk-based approach helps IT and DevOps…

One question we often get from customers or prospective clients is why we use 18+ threat feeds and exploit intelligence feeds? Seems excessive, right? Why not just 4 or 5 feeds? Or 10? Why do we use more than 18 threat feeds and exploit intelligence feeds to power the Kenna.VM modern vulnerability management platform?  The…

Late last year I was given the task of developing a simple tool that would help quantify a customer’s return on investment (ROI) in Kenna solutions. Now, first let me clarify for you that we already had an ROI tool in-house; it was really good, albeit very complicated. This new request hinged on the “simple”…

Zero-day vulnerabilities are vulnerabilities that have not been released to the public and are exploited on the same day as the weakness is discovered. The problem is that attackers may discover zero-day vulnerabilities and try to make use of them before they are made known to the software developer and a patch to fix the…