Knowledge

6 entries

vulnerability frameworks

Known Exploited Vulnerabilities catalogue. If it is here, someone is using it. Treat exposure as urgent.

concepts vulnerability

CVE names a vulnerability. CVSS scores a model of severity. Neither tells you if you are exposed or if it is being used.

vulnerability hardening acsc-glossary

A vendor fix for a hole or a defect. Installing it is patching. Explaining why you did not is an exception with an expiry date.

vulnerability concepts acsc-glossary

A weakness in requirements, design, build, or operations that can be tripped or abused and break the security policy.

vulnerability hardening acsc-glossary

Find, rank, fix, check. Known-exploited and exposure beat a 400-page scanner PDF.

vulnerability acsc-glossary

A usable flaw the vendor has not disclosed or patched yet. Your window is not a blog post. It is exposure.

Definitions informed by ASD's ACSC glossary. cyber.gov.au glossary