Company
Date Published
Author
Bugcrowd
Word count
574
Language
English
Hacker News points
None

Summary

The Vulnerability Rating Taxonomy (VRT) has been updated to version 1.8, with new entries added for Server Misconfiguration, Indicators of Compromise, and Mobile Security Misconfiguration. The VRT now includes remediation advice for specific cases of server misconfigurations, such as race conditions and cache poisoning, to help organizations mitigate vulnerabilities. Additionally, a new category called "Indicators of Compromise" has been introduced to signal potential points of compromise to customers. The update also removes two subcategories under 'Mobile Security Misconfiguration' that were found to have a potentially negative impact on security, but are now classified as P5. The VRT is a living document that is continually updated with contributions from the broader security community, and its updates will be implemented into the Crowdcontrol platform today.