Vulnerability management needs more intel
AI models have dramatically increased the rate of vulnerability discovery while they have simultaneously decreased the time to exploit those vulnerabilities from months to hours. Despite this explosion in vulnerabilities, however, malicious actors will not use all of them; in fact, the vast majority will never be exploited. Therefore, defenders need to know which vulnerabilities to prioritize for patching or mitigation. This talk will discuss how cybersecurity providers could inform these decisions by sharing information not provided through the CVE enrichment process, including proof of concept availability, exploitation confirmation, links to the threat actors, confirmed scanning activity, detection rules, and mitigations other than patching.
Michael Daniel – Cyber Threat Alliance
Michael Daniel serves as the President & CEO of the Cyber Threat Alliance (CTA), a not-for-profit membership association that enables cyber threat information sharing among cybersecurity organizations. Prior to CTA, Michael served as US Cybersecurity Coordinator from 2012 to 2017, leading US cybersecurity policy development both domestically and internationally, facilitating US government partnerships with the private sector, and coordinating significant incident response activities. From 1995 to 2012, Michael worked for the Office of Management and Budget, overseeing funding for the U.S. Intelligence Community. Michael also works with the Aspen Cybersecurity Group, the World Economic Forum’s Global Future Council on Cybersecurity and the Partnership Against Cybercrime, and other organizations improving cybersecurity in the digital ecosystem. In his spare time, he enjoys running and martial arts.