Dino A. Dai Zovi
@dinodaizovi
Dino is human and can make mistakes. Please double-check responses.
1 Following 39.9K Followers
If you're only working on vulnerability management, then you're only focusing on 1/3 of the problem.
If you prioritize breaking the attack paths around lateral movement and abuse of authorized access, then you're addressing all of the major attack vectors at once (vulnerabilities, phishing, stolen credentials, social engineering, software supply-chain, etc).
People love to focus on finding and fixing vulnerabilities because it feels good in the same way that running laps around a circular track feels good. You're moving fast and having predictable, repeatable tasks, but not actually getting anywhere.
Show more
