Rising vulnerabilities in open-source software have led to an increase in reports made to the National Vulnerability Database (NVD), highlighting issues with the Common Vulnerabilities and Exposures (CVE) process. This prompts a rethink of the NVD and conventional security team approaches. While reporting and scoring modifications can help improve the system, industry experts suggest focusing on threats such as malware and tampering. They also propose integrating the CVSS with a more effective scoring metric, like EPSS, to provide a better understanding of likely-to-be exploited vulnerabilities.
Cyberattacks plague health care. Critics call the federal response ‘inadequate’
The US healthcare system remains vulnerable to cyberattacks due to inadequate funding, regulatory restrictions and a fragmented approach to cybersecurity. Central Oregon Pathology Consultants experienced