EPSS is not foolproof: Shift your AppSec beyond vulnerabilities
The Exploit Prediction Scoring System is useful, but limited. Here's why your application security strategy needs an upgrade.
Jaikumar Vijayan
Freelance technology journalist. A former Senior Editor of Computerworld, Jai is a journalist and technology content writing specialist, with 20+ years of award-winning experience in IT trade journalism. He is a correspondent for the Christian Science Monitor and a contributor to Dark Reading, eWEEK, Datamation, IBM Security Intelligence, and Third Certainty. He writes features and covers breaking news stories on information security, data privacy, and big data/business analytics. His recent projects include ERP case studies and an e-book on enterprise mobility management best practices.
Posts from Jaikumar Vijayan
EPSS is not foolproof: Shift your AppSec beyond vulnerabilities
Go beyond vulnerabilities for your AppSec: Here's why it's essential
Two new reports — and the rise of AI and supply chain attacks — make it clear organizations must look beyond vulnerability mitigation alone. Take action now.
Suspicious file analysis: Enhance your SOC to fight sophisticated attacks
Several factors are driving the need for better detection of malicious files. Ransomware is one that stands out. Here's how to boost your triage efforts.
Get real about container security: 4 essential practices to manage risk
Here are key practices you must implement to protect container workloads — and new controls needed for all software — in the age of supply chain security.
The state of AppSec tooling: Step up to modern software security
Organizations are struggling with outdated tools. Here's what you need to know about modernizing your AppSec tooling for today's supply chain threats.
Software liability gets real: 5 ways to get ahead of the EU's new directive
Here's what your organization needs to know about the Product Liability Directive — and how to avoid any slip-ups.
Connected car security: Software complexity creates bumps in the road
Here's what you need to know about connected car security initiatives — and key lessons more broadly from software supply chain security's rough ride.
Keep your secrets secret: 5 core tips — and a call to action on modernizing
A multilayered approach to prevent secrets exposure is good strategy — but it must include a final check on all software before it goes out the door.
5 commercial software attacks — and what you can learn from them
Don't just roll the dice with commercial software risk. Here are key lessons from recent attacks for your security team.