Anúncio
Check these out next
Edgescan 2021 Vulnerability Stats Report
24 de Feb de 2021•0 gostou•92 visualizações
0 gostaram
Seja o primeiro a gostar disto
mostrar mais
visualizações
Vistos totais
0
No Slideshare
0
De incorporações
0
Número de incorporações
0
Baixar para ler offline
Denunciar
Internet
A deck discussing the the findings from the Edgescan 2021 Vulnerability Stats Report. A full stack view of the vulnerabilities discovered in 2020 based on thousands of assessments. Host, network and application layer security metrics -Full stack
Eoin KearySeguir
CEO / Founder edgescan em edgescanAnúncio
Anúncio
Anúncio
Recomendados
Tictaclabs Managed Cyber Security ServicesTicTac Data Recovery
Managed Cyber Security ServicesMichael Bowers
Community IT - Crafting Nonprofit IT Security PolicyCommunity IT Innovators
Next-Generation SIEM: Delivered from the Cloud Alert Logic
NTXISSACSC2 - Four Deadly Traps in Using Information Security Frameworks by D...North Texas Chapter of the ISSA
Gain Visibility & Control of IT Assets in a Perimeterless WorldQualys
Edgescan 2021 Vulnerability Stats Report
- Risk Density
- Risk Density External Applications 32% High or Critical Risk External Infrastructure 22% High or Critical Risk Internal Applications 50% High or Critical Risk Internal Infrastructure 18% High or Critical Risk
- Risk Density – Organization Size 11-100 staff 0.5% Critical Risk 101 -1000 staff 1% Critical Risk 1001-10,000 staff 3% Critical Risk 10,000+ staff 2.5% Critical Risk 11-100 staff 3% High Risk 101 -1000 staff 13% High Risk 1001-10,000 staff 11% High Risk 10,000+ staff 10% High Risk
- AppSec Critical Risk Top 10 SQL Injection was first discussed in 1998 by Jeff Forristal, also known by the alias Rain Forrest Puppy
- AppSec High Risk Top 10 Cross-Site Scripting was first discussed in 1999 by Microsoft.
- Full stack Critical Risk Top 10 PHP is used by 78.9% of all websites with a known server-side programming language…
- Most common Risk-Accepted Vulnerability
- Mean Time to Remediate – MTTR Critical risk’s IT and Information Security generally does not grow linearly with the size of a business. Larger organizations have more to secure, more data and systems, but generally not relatively more security staff! We believe the size of an organization does not impact speed of security. We believe the size of an organization does not impact speed of security.
- Ages of discovered CVE’s 88% of CVE’s are between 0-5 years old. CVE’s from 2015 are the most common.
- Malware, Ransomware & CVE’s CVE Relative Occurrence Malware Name/variant CVE-2019-0708 28.90% Bluekeep CVE-2017-0143 26.50% EternalSynergy and EternalBlue Exploit Kit CVE-2017-5638 13.20% JexBoss CVE-2017-5715 9.10% Meltdown / Spectre CVE-2017-10271 6.30% Cryptominer CVE-2018-0802 4.20% EXPLOIT.MSOFFICE.CVE-2018-0802 CVE-2019-2725 3.50% Monero CVE-2017-11882 3.10% Loki Infostealer CVE-2018-12130 1.40% Metldown2 CVE-2018-7600 1.00% #drupalgeddon2 CVE-2018-4878 0.70% SWF_EXPLOYT.BL CVE-2017-0199 0.70% FINSPY CVE-2018-8174 0.70% Monero Miner CVE-2012-0158 0.70% Safe The Most common CVE’s related to Malware and Ransomware were between 1 and 3 years old
- Thanks. 2021 Vulnerability Stats Report: https://info.edgescan.com/vulnerability-stats-report-2021 @edgescan www.edgescan.com
Anúncio