Security
1009
No, NVD is *not* in good shape to step in...
"We anticipate multiple impacts to CVE, including deterioration of national vulnerability databases and advisories, tool vendors, incident response operations, and all manner of critical infrastructure"
Tines’ Charlie Ardagh on a partnership with Elastic, enriching SIEM alerts and automating away SOC toil and tool-sprawl
The CA/B decision "encourages automation and the adoption of practices that drive the ecosystem away from baroque, time-consuming, and error-prone issuance processes"
'I think a nudge from the government is really important'
The attacker gained “highly sensitive information relating to the financial condition of federally regulated financial institutions”
"Where the gaps remain is when IT [staff] aren’t necessarily specialists in the business that they support and don’t always understand what is mission-critical to their organisation.”
"It’s notable that the exploit first uses the NtQuerySystemInformation API to leak kernel addresses to user mode."