Organizations patch CISA KEV list bugs 3.5 times faster than others, researchers find
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-7028 | Unauthenticated Account Takeover via Password Reset Flaw in GitLab CE/EE | 9.8 | 94% | KEVPoC ×2 | KEV |
| CVE-2024-21412 | CVE-2024-21412: Security Feature Bypass in Microsoft Windows Internet Shortcut Files | 8.1 | 99% | KEVRansomware | KEV |
| CVE-2024-29988 | Mark of the Web Security Feature Bypass in Microsoft SmartScreen Prompt | 8.8 | 45% | KEV | KEV |
From the original article
5 min read at therecord.media
Researchers have found that a catalog of exploited vulnerabilities maintained by the federal government is having a tangibly positive effect on organizations both within and outside of the federal government.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.