RiskSense Blog

Chris Coyle - May 11, 2018

With the Election Assistance Commission distributing federal funding for enhancing election administration and security, many experts recommend that states invest in cyber security improvements. In this guest blog from Chris Coyle, the Managing Director of Business Development Services for Creative Business Collaborative Group LLC, he discusses the reasoning behind and benefits of implementing a Cyber Risk Management platform to improve election security.

RiskSense's Red Team 2017 Accomplishments - In Retrospect

Nida Stewart - Apr 9, 2018

While the RiskSense Red Team's primary objective is completing assessments, RiskSense also provides their security analysts time to conduct research and present at conferences. This blog presents an overview of the RiskSense Red Team's contributions to the cyber security community in 2017.

Data-Driven Prioritization: The Role of AI in Vulnerability and Threat Management

Srinivas Mukkamala - Apr 6, 2018

Srinivas Mukkamala, CEO of RiskSense, Inc. and cyber risk expert, discusses a data-driven approach to cyber threat management. He explains how AI can be used to assess and prioritize vulnerabilities based on their actual exploitability, risk impact and the IT environment. Further, he details the success factors for implementing AI-driven risk prioritization - including the need for reliable data and the role of weaponization analysis to isolate threats that require immediate remediation.

RiskSense's Apache Struts Report: How Do These Vulnerabilities Affect Your Organization?

Nida Stewart - Mar 16, 2018

Last year, an unpatched Apache Struts vulnerability was the foundation of a significant data breach that forced Apache Struts into the spotlight. We presented our findings and observations on vulnerability weaponization and related exploit patterns for Apache Struts vulnerabilities in our Apache Struts Spotlight Report, which is provided in this blog post.

New Year, Same Old Exploits: RiskSense Adds More MS17-010 Modules to Metasploit

Sean Dillon - Feb 7, 2018

Last year, Microsoft released security bulletin MS17-010 describing several remote code execution vulnerabilities present on virtually every version of Windows. Although a patch was released for MS17-010, many organizations continue to ignore applying patches for these critical vulnerabilities. In this blog, Sean Dillon discusses RiskSense's research on MS17-010 last year, a new exploit module RiskSense added to Metasploit this week, and additional mitigations and systems hardening that can be implemented outside of just applying the MS17-010 patch.

I've Got 99 Cyber Security Problems and Accuracy is One

Ben Mixon-Baca - Feb 3, 2018

The successes of machine learning and artificial intelligence has spurred excitement and innovation in many fields, including the cyber security field. While everyone wants to capitalize on this success, Ben Mixon-Baca talks about concerns regarding the quality and quantity of data and how ninety-nine percent accuracy may not be as accurate as you may think.

From Vulnerability to Exploit: Understanding Weaponization

Nida Stewart - Jan 12, 2018

Weaponization is constructing an exploit for a vulnerability. In this blog post, we will discuss what key elements are involved, the different weaponization state types, and lessons organizations can learn from weaponization patterns.

The Kernel Page Tables Have Turned: Newly Discovered Hardware Vulnerability in Most CPUs: Spectre and Meltdown

Zach Harding - Jan 5, 2018

Security researchers have just discovered two attacks that affect most CPUs manufactured in the last twenty years. These attacks use techniques only discovered in the past year to traverse one of the basic security boundaries protecting computer processes: virtual memory. This post contains information to let you assess the impact on your organization and ensure you are protected.

The Details and the Dilemmas that the National Vulnerability Database Poses to Organizations

Nida Stewart - Dec 28, 2017

Many organizations use the National Vulnerability Database (NVD) to determine what actions to take regarding their cyber security. While this information is useful, the method that it is presented in tells organizations very little. What vulnerabilities are most important for organizations to patch? The RiskSense Platform takes information from the NVD and assists organizations in determining what vulnerabilities will impact them the most.

Visualizing Multi-Client Risk

Pamela Chang - Dec 28, 2017

RiskSense specializes in presenting cyber risk for its clients through insightful visualization and analysis techniques. In this blog post, we present our unique multi-fold approach that combines user interface with engineering to address the complexity of visualizing cyber risk across multiple organizational business groups using a distributed bubble chart. The bubble chart visualization helps our end users to quickly identify the high-risk groups within their organizations, while retaining the holistic picture of their cyber risk posture.

Featured Authors

RiskSense Careers

Interested in working for RiskSense? See our available job postings now!

VIEW NOW

Spectre Rises from the Grave