The National Institute of Standards and Technology (NIST) has proposed a new metric designed to evaluate vulnerabilities and their potential exploitation.<\/p>\n
By using this approach, organizations can prioritize them based on their likelihood of being exploited.<\/p>\n
This happens by calculating the base score using the Common Vulnerability Scoring System (CVSS) which quantifies the severity and modulates scores based on the likelihood that vulnerabilities will be exploited.<\/p>\n
The CVSS is an industry-standard vulnerability metric that helps in assigning severity scores to vulnerabilities.<\/p>\n
It helps stakeholders prioritize their response activities and helps determine the urgency of the situation.<\/p>\n
The score is represented numerically on a scale of 0-10.<\/p>\n
However, the existing CVSS scoring system focuses more on potential impact rather than the likelihood of exploitation.<\/p>\n
This is where NIST’s new proposal can fill the gaps.<\/p>\n
By providing a real-time and dynamic evaluation of vulnerabilities, it can lead to a more adequately informed response and prevention of cyber threats.<\/p>\n
Security researcher, Leon Jurani\u0107, has discovered numerous vulnerabilities in NASA’s in-house open source software.<\/p>\n
These vulnerabilities could potentially be exploited by attackers to breach their systems.<\/p>\n
The affected system is named ‘NASA CFITSIO’, and it’s a library of C and Python functions that read and write data files in FITS (Flexible Image Transport System) data format. <\/p>\n
The primary concern here is that this software is not just used by NASA, but it is also widely used in astronomical community making telescopes and other satellite imagery software.<\/p>\n
An exploitation of these vulnerabilities could go beyond just NASA, impacting other organizations and entities globally.<\/p>\n
NASA has been informed about the vulnerabilities and it’s likely they’re working on patches as we speak.<\/p>\n
This incident serves as a crucial reminder that open source software, while cost-effective and flexible, can also pose significant cybersecurity concerns.<\/p>\n
Organizations that utilize such software should always adopt robust vulnerability management programs and maintain a strong security posture.<\/p>\n
For more information on these topics, please check out the following articles:<\/p>\n
NIST\u2019s Novel Approach in Vulnerabilities Metric The National Institute of Standards and Technology (NIST) has<\/p>\n","protected":false},"author":1,"featured_media":3461,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pmpro_default_level":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[2,5],"tags":[],"class_list":["post-3460","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-news","pmpro-has-access"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3460","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/comments?post=3460"}],"version-history":[{"count":1,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3460\/revisions"}],"predecessor-version":[{"id":3462,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3460\/revisions\/3462"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/media\/3461"}],"wp:attachment":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/media?parent=3460"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/categories?post=3460"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/tags?post=3460"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}