Rising vulnerabilities in open-source software have led to an increase in reports made to the National Vulnerability Database (NVD), highlighting issues with the Common Vulnerabilities and Exposures (CVE) process. This prompts a rethink of the NVD and conventional security team approaches. While reporting and scoring modifications can help improve the system, industry experts suggest focusing on threats such as malware and tampering. They also propose integrating the CVSS with a more effective scoring metric, like EPSS, to provide a better understanding of likely-to-be exploited vulnerabilities.
Russian-Linked Cyber Espionage Hits Kazakhstan with Dangerous Malware
Hackers linked to the Russian Government, known as UAC-0063, have been attacking Kazakhstan in an effort to gather economic, political, and strategic intelligence. Known for
