. home.aspx



Prioritizing Vulnerabilities Is Key to Patching Success, Report Find

January 22, 2019 / Sean Michael Kerner

There is no shortage of software vulnerabilities but not all flaws have equal severity, and only a subset are essential to patch immediately. That's one of the core themes from a report released by Kenna Security and the Cyentia Institute on Jan. 22, titled, Prioritization to Prediction: Getting Real About Remediation. The report analyzed three billion vulnerabilities that were managed across over 500 different organizations. In that dataset the researchers determined that approximately 544 million vulnerabilities were rated as high-risk. The good news is that organizations have patched 70 percent of the critical vulnerabilities. The bad news however is that still left 163 million vulnerabilities open. "Enterprises would ideally patch every vulnerability within their infrastructure, but we know the reality is that they don’t have the time or resources to do so," Ed Bellis, CTO at Kenna Security, told eWEEK. "Due to that reality, security and IT teams need to pr...