Vulnerabilities, CVEs and the attack surface

In this episode, we discuss whether vulnerability scores are still a viable tool when it comes to measuring cyber threats.

Both CVEs and CVSS are core security tools. But, our guest this week argues, they are often misused. In a worst case scenario, they add little to effective defence, and can divert security teams from the real threats.

Tod Beardsley is VP of security research at runZero, is on the board of the CVE Project, and is a former official at CISA.