In November, Mitre released the 2024 CWE Top 25 Most Dangerous Software Weaknesses list. Today, VulnCheck issued a report re-evaluating the rankings with a threat-centric approach.
VulnCheck now provides an automated approach to providing broader visibility into differences between VulnCheck KEV and CISA KEV through a Jupyter Notebook publicly available on GitHub.
A Look into the Last 6-months of Vulnerability Exploitation… January-June 2024
A Look into the Last Decade of Vulnerability Exploitation… 2014 - 2023
Taking a data-driven approach to visualizing the profile of threat actors can provide meaningful information without the time-consuming process of sifting through lengthy reports of information.
The National Vulnerability Database contains thousands of CVSS vectors. How accurate are those vectors and does accuracy matter?