2026-09-06 19:41 UTC
RE: https://abyssdomain.expert/@filippo/117218178412693242
vuln scanners almost all rely on cve/mitre
most of them exist to make a fictional number somehow continually go down and to the right.
those exist because compliance demands it
thus we have this perpetual cycle of 'make bullshit vulns, then fix bullshit vulns, so it looks like we're doing something'
meanwhile, jenkins, jfrog, and firewall interfaces chilling with default creds on the internet still get popped every day
Replies (2)
-
@winterknight1337@infosec.exchange 2026-09-06 20:30
@Viss@mastodon.social I spent 4 years in vulnerability management. I’ve been a red teamer for a little over a year now, and tbh it’s made a lot of my vuln management job feel like busywork as far as outcomes are concerned.
-
@SpaceLifeForm@infosec.exchange 2026-09-06 23:19
@Viss@mastodon.social If no reproducable test case is provided, I would ignore. #Triage