Chris Hughes and Nikki Robinson recently wrote the book Effective Vulnerability Management. Dale and Chris discuss the topic and book including:
-
The definition and scope of vulnerabilities. It’s much more than coding errors that need patches.
-
Are ICS protocols lacking authentication “vulnerabilities”
-
The reality that most organizations have 100’s of thousands of unpatched vulnerabilities. Some statistics and will this change.
-
Ways to prioritize what vulnerabilities you address.
-
The SSVC decision tree approach that was introduced at S4 as Never, Next, Now
-
Tooling … vulnerability management, software configuration, ticketing, remediation.
-
And much more.
Links:
-
Effective Vulnerability Management, https://www.amazon.com/Effective-Vulnerability-Management-Vulnerable-Ecosystem/dp/1394221207/
-
Dale’s ICS-Patch Decision Tree, https://dale-peterson.com/wp-content/uploads/2020/10/ICS-Patch-0_1.pdf
Popular Podcasts
United States of Kennedy
United States of Kennedy is a podcast about our cultural fascination with the Kennedy dynasty. Every week, hosts Lyra Smith and George Civeris go into one aspect of the Kennedy story.
Stuff You Should Know
If you've ever wanted to know about champagne, satanism, the Stonewall Uprising, chaos theory, LSD, El Nino, true crime and Rosa Parks, then look no further. Josh and Chuck have you covered.
Dateline NBC
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com