VulnCheck

NIST misses its own NVD backlog deadline. New data from VulnCheck's Patrick Garrity shows that as of September 21st...
- 📊 72.4% of CVEs (18,358 CVEs) in the NVD have yet to be fully analyzed
-👀 46.7% of KEVs remain unanalyzed by the NVD

Read more: https://vulncheck.com/blog/nvd-backlog-exploitation-lurking

📢TODAY! At 1:00 pm ET, join VulnCheck and Cyware to learn how security teams can achieve a new level of intelligence to identify and prioritize emerging threats at scale.

Save your spot: ➡️ https://hubs.ly/Q02VbRlq0

📅On November 14 at 1:00 pm ET, join VulnCheck and Cyware for our joint webinar, "Mining the Gaps for Emerging Threats."

Register now to learn how security teams can achieve a new level of intelligence to identify and prioritize threats at scale: https://hubs.ly/Q02VbRlq0

Cybersecurity Marketing Society's annual #CyberMarketingCon is finally here! Our very own Thomas Bain will be onsite hosting a must-see panel session about the role marketing plays in accelerating cybersecurity startups’ GTM success.

Check out the full agenda here: https://www.cybermarketingconference.com/?_gl=1*13g1sg3*_gcl_au*MTk1ODgzNjIwNi4xNzMxMzkzNDg5#agenda"

Today, @vulncheck@infosec.exchange released new research revealing that 99% of ProjectSend instances are still vulnerable to a critical vulnerability that has been publicly known for over a year. More on how attackers are exploiting this vulnerability here: https://vulncheck.com/blog/projectsend-exploited-itw

📣 THURSDAY: Don't miss our joint webinar with Cyware, where industry experts will share how security teams can identify gaps in emerging threats and get mission-critical insights to remediate the vulnerabilities that matter most.

Reserve your spot: ➡️ https://hubs.ly/Q02VbRlq0

We are thrilled to share that VulnCheck has been nominated for Emerging Tech Company of the Year in the 12th annual NEVYs Awards by the New England Venture Capital Association, which honors the most innovative companies shaping the New England startup + venture ecosystem.

Learn more: https://www.linkedin.com/pulse/new-england-venture-capital-association-hw7ze/

The weaponization of unpatched vulnerabilities remains one of the biggest challenges for security teams.

Join VulnCheck and Cyware on November 14 for our expert-led joint webinar to learn how security teams can mine the gaps for emerging threats: https://hubs.ly/Q02VbRlq0

VulnCheck 🤝 Carahsoft

We're thrilled to announce our latest partnership with Carahsoft, empowering the nation's most critical agencies with the tools needed to outpace advisories in today's evolving threat landscape.

Learn more: https://vulncheck.com/press/vulncheck-and-carahsoft-partner

📢TODAY! At 1:00 pm ET, join VulnCheckAI and ThreatConnect to learn how threat intelligence and vulnerability management analysts can quickly get the insights needed to identify and, more importantly, prioritize vulnerabilities at scale.

Register now➡️ https://hubs.ly/Q02VbQFg0

How can your security team prevent and respond to the vulnerabilities that matter most? Join us and ThreatConnect on October 29 for our expert-led webinar to learn how you can tackle the vulnerability prioritization challenge. Last chance to register!➡️ https://hubs.ly/Q02VbQFg0

With VulnCheck NVD++ and KEV integrated for ThreatConnect customers, cyber teams have better, faster and more contextual vulnerability data to prioritize which vulnerabilities to fix first. See how it all works: https://hubs.ly/Q02VmVCt0

Did you hear? VulnCheck and ThreatConnect are partnering to unify threat defense. Joint customers get a new level of vulnerability prioritization with VulnCheck exploit data integrated into ThreatConnect’s TI Ops Platform. Learn more: https://hubs.ly/Q02VmVCt0

📅 Mark your calendars! Join us on October 29 for our joint webinar with
ThreatConnect, "The Emerging Threat Playbook: Operationalizing Exploit Intelligence."

Don't miss out - learn how you can manage the world's vulnerabilities at scale. Register now: https://hubs.ly/Q02VbQFg0

In September, VulnCheck identified 78 CVEs that were publicly disclosed for the first time as exploited in the wild. Check out our KEV Report to learn which software and product categories topped the list, who reported exploitation first, and more. https://hubs.ly/Q02Vbr5F0

Did you catch VulnCheck’s September Initial Access Intelligence (IAI) update?

Last month, we crossed 290+ IAI artifacts. We covered 14 different vendors and products, with half having confirmed exploitation activity as of October 7.

Discover more: https://hubs.ly/Q02Vbx620

The Hackers News recently highlighted VulnCheck research, spotlighting an unpatched vulnerability in Linear Emerge E3 series systems. Organizations using the solution should act quickly to take these devices offline or isolate them. Get the full story: https://thehackernews.com/2024/10/experts-warn-of-critical-unpatched.html

#ICYMI: The Register covered VulnCheck's latest research from Patrick Garrity, showing that while NIST has made considerable progress in processing new vulnerabilities in the NVD, a significant backlog remains. https://www.theregister.com/2024/10/02/cve_pileup_nvd_missed_deadline/

The Cyber News highlighted new research from VulnCheck's Patrick Garrity analyzing the recent Five Eyes alert on the Flax Typhoon botnet. Among the 66 vulnerabilities associated with the botnet, the VulnCheck KEV database included 41 as known to be exploited prior to this advisory. Learn more: https://cybersecuritynews.cm/flax-typhoons-botnet-66-vulnerabilities/

#ICYMI: TheHackersNews details how operators of the Quad7 botnet are actively evolving by compromising several brands of SOHO routers and VPN appliances. Read the full article highlighting VulnCheck's @albinolobster@infosec.exchange's research: https://thehackernews.com/2024/09/quad7-botnet-expands-to-target-soho.html