Peer-Driven Insights

Threat & Vulnerability Management

Active Ambassadors in This Topic

JM Financial Services Ltd

Travel and Hospitality, 1k - 5k

Community Posts

Yes; I had to take extended time off to recover18%

Yes; but I kept working anyway56%

Almost; I was able to catch it early and made changes17%

No; I have not experienced extreme stress or burnout8%

View Results

Working on it17%

View Results

Strongly agree7%

Strongly disagree3%

Unsure (please comment)

View Results

Active Ambassadors in This Topic

Rathik Pathak

Community Posts

What tools/services do you use for CTEM (continuous threat exposure management)?

With Gartner highlighting the urgency of post-quantum cryptography (PQC), I would like to know if there are other members of the group already involved in the discussion or in the planning to face the threat of attacks like 'harvest-now, decrypt-later'?

What’s your organization doing to protect against risks related to disinformation? How are you approaching this & which business unit leaders are currently involved?

How are companies doing Unified Vulnerability Management? The idea is bringing all inputs (AppSec, DevSecOps, VM scanning, asset discovery etc) into one platform. Instead of creating a homegrown solution, are there vendors that do this well?

Is red teaming a better way to demonstrate security needs to the board than traditional compliance audits?

Apart from applying the patches just released, what other mitigation tactics are you using to address the zero-day SharePoint vulnerabilities impacting on-premises servers?

What are you working on to improve your threat hunting program (whether near- or long-term)?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?If not - what is stopping you from setting this up?

If you’ve worked with mobile applications and have experience scanning code, either for vulnerabilities or to ensure best practices, what tools or solutions would you recommend for iOS and Android platforms?

What sorts of failsafe processes/controls, etc, do you rely on to make sure terminated or suspended employees’ access credentials are revoked immediately? Does your org generally rely on direct communications from HR or do you have an HRM or similar system to automate this?

Have you experienced extreme stress or burnout while working in cybersecurity?

Is the edge of your enterprise secure?

Employee Count and Licensing Usage:- What is your employee count?- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?

Vulnerability patching is now a full-time job.

How do you navigate urgent vulnerability patching needs for tools linked to business-critical applications (like SAP NetWeaver)? Are updates like this only done overnight/after business hours?

Thoughts on the recent alleged breach of Oracle Cloud’s login servers? What are your initial reactions to Oracle’s denial of the breach now that some customers have validated the leaked data?

Community Posts

What tools/services do you use for CTEM (continuous threat exposure management)?

With Gartner highlighting the urgency of post-quantum cryptography (PQC), I would like to know if there are other members of the group already involved in the discussion or in the planning to face the threat of attacks like 'harvest-now, decrypt-later'?

What’s your organization doing to protect against risks related to disinformation? How are you approaching this & which business unit leaders are currently involved?

How are companies doing Unified Vulnerability Management? The idea is bringing all inputs (AppSec, DevSecOps, VM scanning, asset discovery etc) into one platform. Instead of creating a homegrown solution, are there vendors that do this well?

Is red teaming a better way to demonstrate security needs to the board than traditional compliance audits?

Apart from applying the patches just released, what other mitigation tactics are you using to address the zero-day SharePoint vulnerabilities impacting on-premises servers?

What are you working on to improve your threat hunting program (whether near- or long-term)?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?If not - what is stopping you from setting this up?

If you’ve worked with mobile applications and have experience scanning code, either for vulnerabilities or to ensure best practices, what tools or solutions would you recommend for iOS and Android platforms?

What sorts of failsafe processes/controls, etc, do you rely on to make sure terminated or suspended employees’ access credentials are revoked immediately? Does your org generally rely on direct communications from HR or do you have an HRM or similar system to automate this?

Have you experienced extreme stress or burnout while working in cybersecurity?

Is the edge of your enterprise secure?

Employee Count and Licensing Usage:- What is your employee count?- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?

Vulnerability patching is now a full-time job.

How do you navigate urgent vulnerability patching needs for tools linked to business-critical applications (like SAP NetWeaver)? Are updates like this only done overnight/after business hours?

Thoughts on the recent alleged breach of Oracle Cloud’s login servers? What are your initial reactions to Oracle’s denial of the breach now that some customers have validated the leaked data?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?

If not - what is stopping you from setting this up?

Employee Count and Licensing Usage:

- What is your employee count?

- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?

- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?

If not - what is stopping you from setting this up?

Employee Count and Licensing Usage:

- What is your employee count?

- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?

- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?