{"id":19938,"date":"2023-10-16T05:29:13","date_gmt":"2023-10-16T12:29:13","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?p=19938"},"modified":"2024-04-25T11:01:37","modified_gmt":"2024-04-25T18:01:37","slug":"decision-intelligence-the-left-right-with-securin-vi","status":"publish","type":"post","link":"https:\/\/webdev.securin.xyz\/articles\/decision-intelligence-the-left-right-with-securin-vi","title":{"rendered":"Decision Intelligence: The Left &#038; Right with Securin VI"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"19938\" class=\"elementor elementor-19938\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3792cd7 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3792cd7\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7d98211\" data-id=\"7d98211\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-828a578 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"828a578\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-c60d738\" data-id=\"c60d738\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d5217bf elementor-widget elementor-widget-text-editor\" data-id=\"d5217bf\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p style=\"text-align: center;\"><em>This is Part 2 discussing how to reduce Known Exploited Vulnerabilities (KEVs), and enhancing cybersecurity resilience.<\/em><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-374ef70 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"374ef70\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-a860a59\" data-id=\"a860a59\" data-element_type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-33e4319 elementor-widget elementor-widget-text-editor\" data-id=\"33e4319\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0be8050 elementor-widget elementor-widget-text-editor\" data-id=\"0be8050\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\"><div class=\"elementor-widget-container\"><h4><a href=\"https:\/\/www.securin.io\/articles\/diving-into-cisa-kevs-securin-vis-in-depth-latency-analysis\/\" target=\"_blank\" rel=\"noopener\">1. A Latency Analysis of CISA KEVs<\/a><\/h4><p>In Part 1, we investigate Securin\u2019s predictive prioritization ability to identify vulnerabilities ahead of CISA\u2019s KEV list. We highlight the substantial time difference between Securin\u2019s proactive alerts and CISA\u2019s KEV list inclusion,\u00a0and the importance of providing organizations with valuable lead time to safeguard against potential threats.<\/p><\/div><\/div><div class=\"elementor-element elementor-element-3e505d7 elementor-widget elementor-widget-text-editor\" data-id=\"3e505d7\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\"><div class=\"elementor-widget-container\"><h4><a href=\"#Part-2-decision-intelligence\">2. Decision Intelligence\u2014The Left &amp; Right with Securin VI<\/a><\/h4><p>In Part 2, we delve into the concept of Decision Intelligence and its role in effective\u00a0<a href=\"https:\/\/www.securin.io\/vulnerability-management\/?_gl=1*1xayqc2*_ga*NTg2MDU5NDA0LjE2OTQxNTY1Njg.*_up*MQ..&amp;__hstc=195281779.e0dea9250f75541323b28942722e00cf.1711566236463.1714061453540.1714064271956.22&amp;__hssc=195281779.14.1714064271956&amp;__hsfp=3450272365\">vulnerability management<\/a>. We discuss how Decision Intelligence can empower organizations to address vulnerabilities incrementally, reduce the overwhelming volume of KEVs, and enhance cybersecurity resilience. This strategic integration allows proactive responses to potential breaches, effectively mitigating risks and fortifying defenses against the ever-shifting cyber landscape.<\/p><\/div><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<div class=\"elementor-element elementor-element-fb27c0b elementor-widget elementor-widget-spacer\" data-id=\"fb27c0b\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-474d289 elementor-widget elementor-widget-menu-anchor\" data-id=\"474d289\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Part-2-decision-intelligence\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2f9a232 elementor-widget elementor-widget-heading\" data-id=\"2f9a232\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Part 2: Decision Intelligence: The Left &amp; Right with Securin VI<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e21b2c4 elementor-widget elementor-widget-text-editor\" data-id=\"e21b2c4\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>In the vast landscape of information, data is both captivating and daunting. Just as a skilled chef can be confused about what dish to plate when faced with an overstocked pantry, the sheer volume of data can bewilder decision-makers. Despite converting data into structured insights, the challenge remains\u2014it often falls short of enhancing the decision-making process. This is where the concept of Decision Intelligence steps in, offering a beacon of guidance to help organizations navigate through the sea of information and make smart choices.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f608db6 elementor-widget elementor-widget-spacer\" data-id=\"f608db6\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b26f0be elementor-widget elementor-widget-heading\" data-id=\"b26f0be\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What Is Decision Intelligence?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5771db5 elementor-widget elementor-widget-text-editor\" data-id=\"5771db5\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Decision Intelligence transforms data into actionable insights, fostering informed choices and effective decision-making. It utilizes Artificial Intelligence (AI), machine learning, and data analytics to convert large datasets into contextualized information.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4f874a9 elementor-widget elementor-widget-spacer\" data-id=\"4f874a9\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-85819da elementor-widget elementor-widget-heading\" data-id=\"85819da\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Why Do CISA KEVs Need Decision Intelligence?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2e4c96b elementor-widget elementor-widget-text-editor\" data-id=\"2e4c96b\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The ever growing list of CISA\u2019s Known Exploited Vulnerabilities (KEVs) now stands at 983 CVEs, while organizations scramble to play catch up and patch these critical vulnerabilities in time.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The list of CISA KEVs, first created in November 2021, has been growing at an exponential rate; CISA added 111 exploited vulnerabilities in the last 6 months alone.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The rapid growth of this list, coupled with the escalating pace of exploitation, underscores the urgent need for strategic and informed decision-making. By harnessing the power of Decision Intelligence, organizations can prioritize actions, and bolster their defenses against the relentless activities of threat actors.<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6bdbdca elementor-widget elementor-widget-spacer\" data-id=\"6bdbdca\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8ceea38 elementor-widget elementor-widget-heading\" data-id=\"8ceea38\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Applying Decision Intelligence: Shift Left<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9dbcea8 elementor-widget elementor-widget-text-editor\" data-id=\"9dbcea8\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The Shift Left perspective takes a look at the root cause of vulnerabilities that garner the attention of attackers. It assesses vulnerabilities based on their associated weaknesses.\u00a0<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">What weaknesses result in dangerous and widely exploitable vulnerabilities?<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">What weaknesses lead to highly automatable exploits?<\/span><\/li><\/ul><p><span style=\"font-weight: 400;\">KEVs&#8217; impact can affect an organization&#8217;s DevOps, impacting the applications or pipelines due to open-source dependencies. Analyzing underlying weaknesses helps estimate vulnerability impact. Exploiting choice weaknesses can amplify attack consequences, especially in open source-driven application development where flaws can be magnified.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c75652d elementor-widget elementor-widget-spacer\" data-id=\"c75652d\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e258fbf elementor-widget elementor-widget-heading\" data-id=\"e258fbf\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Weaknesses Analysis<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2ff43d2 elementor-widget elementor-widget-text-editor\" data-id=\"2ff43d2\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">MITRE\u2019s Common Weakness Enumeration (CWE) catalog standardizes vulnerability identification. By assessing impact, severity, and exploitability, <\/span><a href=\"https:\/\/www.securin.io\/articles\/mitre-mapping-of-cisa-kevs-and-its-challenges\/?_gl=1*x9fiuc*_ga*NTg2MDU5NDA0LjE2OTQxNTY1Njg.*_up*MQ..\"><span style=\"font-weight: 400;\">MITRE<\/span><\/a><span style=\"font-weight: 400;\"> prioritizes weaknesses, guiding effective risk management for organizations.\u00a0<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Within the 106 weaknesses behind CISA KEVs, MITRE&#8217;s Top 25 weaknesses cover around<\/span><b> 71.5%<\/b><span style=\"font-weight: 400;\"> of all vulnerabilities.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>The following 5 weaknesses account for 50% of Remote Code Execution exploits.<\/b><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">CWE-20: Improper Input Validation<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">CWE-78: Improper Neutralization of Special Elements Used in an OS Command (OS Command Injection)<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">CWE-22: Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">CWE- 94: Improper Control of Generation of Code (Code Injection)<\/span><\/li><\/ul><\/li><\/ul><p><span style=\"font-weight: 400;\">The discrepancy in weakness ranking between MITRE&#8217;s Top 25 Weaknesses and CISA\u2019s KEV list is noticeable. This could suggest that the latter provides a more accurate portrayal of weaknesses targeted by attackers. MITRE&#8217;s ranking methodology, which leans on the Common Vulnerability Scoring System (CVSS) and frequency, might overlook the real-world threat context, evident in the presence of these data outliers below.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c08755a elementor-widget elementor-widget-text-editor\" data-id=\"c08755a\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #000000;\"><strong>Interesting Outliers:<\/strong><\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CWE-125: Out-of-Bounds Read<\/span><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">MITRE Rank: 7, CISA KEVs List: 28<\/span><\/li><\/ul><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CWE-352: Cross-Site Request Forgery (CSRF)<\/span><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">MITRE Rank: 9, CISA KEVs List: 42<\/span><\/li><\/ul><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CWE-862: Missing Authorization<\/span><ul><li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">MITRE Rank: 11, CISA KEVs List: 55<\/span><\/li><\/ul><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6591948 elementor-widget elementor-widget-image\" data-id=\"6591948\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"941\" height=\"823\" src=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Top-Weaknessses-Behind-KEVs.png\" class=\"attachment-full size-full wp-image-19943\" alt=\"Top Weaknessses Behind KEVs\" srcset=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Top-Weaknessses-Behind-KEVs.png 941w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Top-Weaknessses-Behind-KEVs-300x262.png 300w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Top-Weaknessses-Behind-KEVs-768x672.png 768w\" sizes=\"(max-width: 941px) 100vw, 941px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9eccd88 elementor-widget elementor-widget-spacer\" data-id=\"9eccd88\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c51c690 elementor-widget elementor-widget-heading\" data-id=\"c51c690\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Applying Decision Intelligence: Shift Right<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5c0d7e9 elementor-widget elementor-widget-text-editor\" data-id=\"5c0d7e9\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Shifting right in cybersecurity involves adopting an attacker&#8217;s perspective, a strategy that MITRE ATT&amp;CK Mapping facilitates. It helps organizations understand attacker motivations:\u00a0<\/span><\/p><ol><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ease of Detection<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ease of Exploitation<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Maximizing Impact<\/span><\/li><\/ol><p><span style=\"font-weight: 400;\">Considering what attackers want enables proactive defenses that can be tailored to thwart adversary tactics within the MITRE ATT&amp;CK framework. Organizations will be able to address vulnerabilities promptly and minimize the potential fallout.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-756fa13 elementor-widget elementor-widget-spacer\" data-id=\"756fa13\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1bee047 elementor-widget elementor-widget-heading\" data-id=\"1bee047\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">MITRE ATT&amp;CK Mapping: Highlights<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4feb8f1 elementor-widget elementor-widget-text-editor\" data-id=\"4feb8f1\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Ease of Detection:<\/b><span style=\"font-weight: 400;\"> 418 KEVs can be exploited remotely against a public web application or external remote service. This will make it easy for a threat actor to target the easy-to-identify external attack surface.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Ease of Exploitation:<\/b><span style=\"font-weight: 400;\"> 512 KEVs require no existing privileges or user interaction and have low attack complexity, allowing threat actors to easily automate exploitation in or after initial compromise.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Maximizing Impact:<\/b><span style=\"font-weight: 400;\"> 96 KEVs can allow a complete ATT&amp;CK kill chain (from Initial Access to Impact), leading to a threat actor gaining complete control of the target organization\u2019s systems.<\/span><\/li><\/ul><p><span style=\"font-weight: 400;\">The<\/span> <span style=\"font-weight: 400;\">Progress MOVEit Transfer SQL Injection Vulnerability (<\/span><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-34362\" target=\"_blank\" rel=\"noopener\">CVE-2023-34362<\/a><span style=\"font-weight: 400;\">) is a prime example of a vulnerability that ticks the above requirements and is most appealing to an attacker.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Securin\u2019s MITRE ATT&amp;CK Mapping can help organizations understand and visualize a CVE from the perspective of a threat actor.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b6e277d elementor-widget elementor-widget-spacer\" data-id=\"b6e277d\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6f15f98 elementor-widget elementor-widget-heading\" data-id=\"6f15f98\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Securin\u2019s MITRE ATT&amp;CK Mapping for the MOVEit Transfer Vulnerability (CVE-2023-34362)<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-71a71d4 elementor-widget elementor-widget-image\" data-id=\"71a71d4\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1980\" height=\"638\" src=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Securin-MITRE-Attack.png\" class=\"attachment-full size-full wp-image-19944\" alt=\"Securin MITRE Attack\" srcset=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Securin-MITRE-Attack.png 1980w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Securin-MITRE-Attack-300x97.png 300w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Securin-MITRE-Attack-1024x330.png 1024w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Securin-MITRE-Attack-768x247.png 768w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Securin-MITRE-Attack-1536x495.png 1536w\" sizes=\"(max-width: 1980px) 100vw, 1980px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1f98c42 elementor-widget elementor-widget-text-editor\" data-id=\"1f98c42\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Based on the above information, it is not surprising that the MOVEit Transfer vulnerability was exploited by the Cl0p ransomware gang, potentially affecting 160 victims.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9979aa4 elementor-widget elementor-widget-spacer\" data-id=\"9979aa4\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3368848 elementor-widget elementor-widget-heading\" data-id=\"3368848\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Shift Left + Right for Decision Making<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c6ec5e2 elementor-widget elementor-widget-image\" data-id=\"c6ec5e2\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1208\" height=\"443\" src=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Shift-Left-Decision-Making.png\" class=\"attachment-full size-full wp-image-19945\" alt=\"Shift Left Decision Making\" srcset=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Shift-Left-Decision-Making.png 1208w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Shift-Left-Decision-Making-300x110.png 300w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Shift-Left-Decision-Making-1024x376.png 1024w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2023\/10\/Shift-Left-Decision-Making-768x282.png 768w\" sizes=\"(max-width: 1208px) 100vw, 1208px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c93f149 elementor-widget elementor-widget-text-editor\" data-id=\"c93f149\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The strategy of shifting from Right to Left in the decision flow diagram (above) enables organizations to address vulnerability exposures incrementally, allowing them to handle CISA KEVs in manageable sprints rather than being overwhelmed by their sheer volume all at once. <\/span><\/p><p><span style=\"font-weight: 400;\">For instance, by incorporating both Left and Right Decision Intelligence over the list of <\/span><a href=\"https:\/\/www.securin.io\/category\/cisa-kev\/?_gl=1*1by02ix*_ga*NTg2MDU5NDA0LjE2OTQxNTY1Njg.*_up*MQ..\"><span style=\"font-weight: 400;\">CISA KEVs<\/span><\/a><span style=\"font-weight: 400;\">, we manage to reduce the 983 vulnerabilities to the 47 most dangerous vulnerabilities, the cr\u00e8me de la cr\u00e8me of security concerns.<\/span><\/p><p><span style=\"font-weight: 400;\">In short, the blend of Left and Right Decision Intelligence streamlines <\/span><a href=\"https:\/\/www.securin.io\/vulnerability-management\/?_gl=1*1d2oex5*_ga*NTg2MDU5NDA0LjE2OTQxNTY1Njg.*_up*MQ..\"><span style=\"font-weight: 400;\">vulnerability management<\/span><\/a><span style=\"font-weight: 400;\"> and boosts cybersecurity resilience. Equipped with valuable insights and tools, organizations can make informed choices, diminish vulnerabilities, and better face evolving cyber threats. This strategic integration empowers proactive responses to potential breaches, effectively mitigating risks and fortifying defenses against the ever-shifting cyber landscape.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-bcfb2b2 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"bcfb2b2\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-bbd0099\" data-id=\"bbd0099\" data-element_type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-9e611bd elementor-widget elementor-widget-heading\" data-id=\"9e611bd\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Experience the power of Securin's Vulnerability Intelligence Platform. <\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3cbbfe3 elementor-align-center elementor-widget elementor-widget-button\" data-id=\"3cbbfe3\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-lg\" href=\"https:\/\/www.securin.io\/contact-us\" target=\"_blank\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">REQUEST A DEMO<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>In the vast landscape of information, data is both captivating and daunting. <\/p>\n","protected":false},"author":1,"featured_media":19949,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[631,110],"tags":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/19938"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/comments?post=19938"}],"version-history":[{"count":37,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/19938\/revisions"}],"predecessor-version":[{"id":20688,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/19938\/revisions\/20688"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/19949"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=19938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/categories?post=19938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/tags?post=19938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}