The National Institute of Standards and Technology (NIST) has proposed a new metric designed to evaluate vulnerabilities and their potential exploitation.<\/p>\n
By using this approach, organizations can prioritize them based on their likelihood of being exploited.<\/p>\n
This happens by calculating the base score using the Common Vulnerability Scoring System (CVSS) which quantifies the severity and modulates scores based on the likelihood that vulnerabilities will be exploited.<\/p>\n
The CVSS is an industry-standard vulnerability metric that helps in assigning severity scores to vulnerabilities.<\/p>\n
It helps stakeholders prioritize their response activities and helps determine the urgency of the situation.<\/p>\n
The score is represented numerically on a scale of 0-10.<\/p>\n
However, the existing CVSS scoring system focuses more on potential impact rather than the likelihood of exploitation.<\/p>\n
This is where NIST’s new proposal can fill the gaps.<\/p>\n
By providing a real-time and dynamic evaluation of vulnerabilities, it can lead to a more adequately informed response and prevention of cyber threats.<\/p>\n
Security researcher, Leon Jurani\u0107, has discovered numerous vulnerabilities in NASA’s in-house open source software.<\/p>\n
These vulnerabilities could potentially be exploited by attackers to breach their systems.<\/p>\n
The affected system is named ‘NASA CFITSIO’, and it’s a library of C and Python functions that read and write data files in FITS (Flexible Image Transport System) data format. <\/p>\n
The primary concern here is that this software is not just used by NASA, but it is also widely used in astronomical community making telescopes and other satellite imagery software.<\/p>\n
An exploitation of these vulnerabilities could go beyond just NASA, impacting other organizations and entities globally.<\/p>\n
NASA has been informed about the vulnerabilities and it’s likely they’re working on patches as we speak.<\/p>\n
This incident serves as a crucial reminder that open source software, while cost-effective and flexible, can also pose significant cybersecurity concerns.<\/p>\n
Organizations that utilize such software should always adopt robust vulnerability management programs and maintain a strong security posture.<\/p>\n
For more information on these topics, please check out the following articles:<\/p>\n
NIST\u2019s Novel Approach in Vulnerabilities Metric The National Institute of Standards and Technology (NIST) has<\/p>\n","protected":false},"author":1,"featured_media":3461,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pmpro_default_level":"","_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[2,5],"tags":[],"class_list":["post-3460","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-news","pmpro-has-access"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t