Secunia: Decoding likely exploited vulnerabilities (LEV)— A new metric from NIST

[Rss Bot 1]

NIST has proposed a new metric to help IT teams prioritize vulnerabilities. The likely exploited vulnerability (LEV) augments, but does not replace, existing metrics like known exploited vulnerability (KEV) and Exploit Prediction Scoring System (EPSS) scores for more effective risk mitigation. NIST’s effort on LEV is meant to address a critical gap in vulnerability management. With tens of thousands of vulnerabilities published each year, only a small percentage are being actively exploited in the wild. Organizations are continuously challenged by allocating limited remediation resources effectively. Existing approaches—such as the EPSS and KEV lists—are useful, but they have limitations. EPSS tends…

View the full article