Overview
This interactive dashboard consolidates some cybersecurity insights from two key sources:
- CISA KEV Catalog
- EPSS Scores Database
The dashboard uses internal data sources from Google spreadsheets, ensuring up-to-date information without manual CSV file imports. The continuous updates to EPSS scores add ongoing value. Data sources are refreshed every 24 hours to maintain relevance.
How to Use It
Using the dashboard is straightforward. Simply interact with the various filters and views to analyze vulnerabilities. Understand the correlation between KEV and EPSS scores, gaining insights into your vulnerability landscape.
The Value in Insights
This dashboard offers a powerful lens into your cybersecurity posture. By amalgamating data from CISA KEV and EPSS scores, it provides actionable insights, enabling informed decision-making regarding vulnerability management and risk mitigation strategies.
Use Cases:
Integrating CISA KEV’s known exploited vulnerabilities and EPSS’s predictive scores, the dashboard assists security teams in prioritizing which vulnerabilities to address first. High EPSS scores coupled with CISA KEV data signify critical vulnerabilities that have a high probability of being exploited or are actively being exploited. This prioritization helps in allocating resources efficiently, focusing on the most pressing security concerns.
Consider for example this view of the main Microsoft related CVEs that are actively related to a campaign and with an EPSS score over 50%
Trend Analysis and Forecasting
The dashboard could enable trend analysis by tracking changes in EPSS scores over time for specific vulnerabilities. Understanding how these scores evolve provides insights into the shifting threat landscape. It allows security professionals to anticipate potential future threats and take preemptive measures to safeguard systems before vulnerabilities are actively exploited.
Comparative Analysis and Benchmarking
Comparing vulnerabilities based on their CISA KEV status and EPSS scores allows for benchmarking against industry standards. Identifying discrepancies between severity and exploit likelihood reveals areas where traditional severity ratings might not align with real-world exploit probabilities. This analysis helps refine risk assessment methodologies and improve decision-making for vulnerability remediation strategies.
Resource Links
Feedback
For questions or ideas send me a message in Github or find me on LinkedIn