When it comes to vulnerability triage, ditch CVSS and prioritize exploitability

When it comes to software security, one of the biggest challenges facing developers today is information overload. Thanks in part to the widespread proliferation and use of open-source code (a study by Red Hat showed that 36% of software in use at surveyed organizations was open source), as well as the increasing complexity of the average application, a given project can now be expected to have a massive amount of dependencies. In turn, each of … More →
The post When it comes to vulnerability triage, ditch CVSS and prioritize exploitability appeared first on Help Net Security.Expert analysis – Help Net SecurityRead More