The Expanding Attack Surface Demands a New Operating Model

What happened?

Why the Risk Operations Center Is Becoming the System of Record for Proactive Enterprise Risk Reduction The cybersecurity industry has spent years improving how we discover vulnerabilities. The challenge now is no longer finding risk. It is reducing risk faster than adversaries can exploit it. The PHP2Shell vulnerabilities disclosed in October are a reminder of how quickly exposure can become exploitation. Within hours of disclosure, attack activity was already being observed.

Key details

• Only a small percentage of those PHP installations were patched during the critical first hours after the PHP2Shell disclosure.
• Enterprise attack surface now includes mobile devices, medical technology, healthcare, manufacturing, OT, IoT, and cyber-physical systems.
• Qualys Enterprise TruRisk Management integrates telemetry from Lookout, NowSecure, Claroty, and Nozomi Networks for mobile and OT/IoT/healthcare visibility.
• Global mROC Alliance combines Qualys platform, technology partners, and expert services to operationalize risk reduction across the entire attack surface.
• Risk Operations Center serves as an operating model for continuous identification, prioritization, validation, and reduction of risk before exploitation.

Summarised by SecOraLens from Qualys Blog. Always read the original source before acting. How SecOraLens verifies advisories.