VulnCheck provides visibility into the vulnerability ecosystem, helping organizations prioritize responses and take action before attacks occur.

VulnCheck

VulnCheck helps organizations outpace adversaries with vulnerability intelligence that predicts avenues of attack with speed and accuracy. The VulnCheck team comprises a who's who of cybersecurity research, with decades of experience uncovering 100s of 0days and 10+ patents. VulnCheck's vulnerability and exploit intelligence equips defenders with the insights they need to focus resources on the vulnerabilities that matter most. That's why VulnCheck has been selected to power government agencies, large enterprises, and the industry's most innovative cybersecurity solutions, covering billions of assets around the world. See what you're missing at www.vulncheck.com.

Aviso Ventures

In-Q-Tel

Sorenson Ventures

Lux Capital

Dave Cole

Oliver Friedrichs

One thing we do very well at VulnCheck is help cyber product teams and enterprise teams (VM, CTI, SecOps, DevSecOps, SSCS, Threat Hunting, Pen Testing and ASM) prioritize which vulnerabilities matter for defending an organization. We do this by taking an evidence-based approach to HOW we prioritize for customers, and that evidence helps us deliver unprecedented context for over 300M records maintained on ALL CVEs that exist. VulnCheck Security Researcher Patrick Garrity 👾🛹💙 put together an interesting set of insights that will enable teams to easily take exploit and exploitation evidence and apply it to products, workflows and response actioning. Take a read! #exploitintelligence #exploitevidence #vulncheck #patrickgarrity

Tomorrow I'm excited to be presenting a new talk on Vulnerability Debt vs. Emerging Threat during the Vulcan Cyber Risk Summit.

Please join me for the discussion: https://lnkd.in/gBPPH3xW

#cybersecurity #infosecurity #riskmanagement #vulnerabilitymanagement

Join us for our first VulnCheck Community call today at 11 AM ET. We want your feedback on enhancing our Community Tier of services, including the VulnCheck KEV, NVD++, XDB, and more.

Click the link below to register for the Zoom session: https://lnkd.in/e2PEQX6X

NVD Leaves Exploited Vulnerabilities Unchecked

📆 It has now been over 1️⃣0️⃣0️⃣ days since the National Institute of Standards and Technology (NIST) started facing challenges enriching software vulnerabilities.

In a new report, VulnCheck found that 30 out of 59 known exploited vulnerabilities (KEVs) registered since February 12 have not yet been analyzed by the NVD team.

⚠️ In total, 50.8% of KEVs are missing critical metadata.

📊 Also in the report:
▪️ 55.9% of weaponized vulnerabilities have not been analyzed by the NVD since February 12
▪️ 82% of vulnerabilities with a proof-of-concept exploit have not been analyzed by the NVD since February 12
▪️ 93.4% of all vulnerabilities have not been analyzed by the NVD since February 12

📰 Read my full story here: https://lnkd.in/eqsBrk89

#NVD #NIST #CVE #CVEs #KEV #KEVs #CWE #CPE #CVSS #MITRE #CISA #Vulnrichment #pURL #CNA #vulnerability #enrichment #patch #exploit

Today, we published our May 2024 Known Exploited Vulnerabilities report, revealing evidence of 103 CVEs that were publicly disclosed for the first time as exploited in the wild, marking a 90.7% increase over April. 

While the report takes a deep dive into exploitation in May, VulnCheck's Patrick Garrity 👾🛹💙 sheds light on the increased trend of vulnerability exploitation. Read more:  https://lnkd.in/eMUcXXNN

Having the largest collection of vulnerability and exploit intelligence in the industry affords VulnCheck researchers the opportunity to slice and dice slivers of it to produce critical insights for the entire cyber community - - and Patrick Garrity 👾🛹💙's latest research initiative unearths the fact that over HALF of all exploited CVE's (in the wild) are not analyzed in NVD's backlog. What's this mean? For starters, just sign up for VulnCheck's Community Tier to access VulnCheck NVD ++ and VulnCheck KEV - that solves this problem for you. Read this post for in-depth insight into some additional information that could help you day-to-day in your SecOps, VM, CTI, DevSecOps or threat hunting role - OR - if you're a a product manager building a cyber product. #vulncheck #vulnchecknvd++ #vulncheckkev #vulnerabilitymanagement

COM:VULNCHECK

VulnCheck

Analysis Not Available