TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

F5 Labs

Log4Shell: Rebooting (The Same Old) Security Principles In its Wake

2021-12-17 · Read original ↗

ATT&CK techniques detected

3 predictions
T1195Supply Chain Compromise
56%
", they emphasize that “ developers who have the information they need ” remediate third - party vulnerabilities significantly faster than those who don ’ t ( 4, 33 ). based on the findings above, however, there is a logistical element here as well, and logistical problems are pri…"
T1195Supply Chain Compromise
38%
"findings about our ability to control supply chain risk are mixed, but they help quantify a problem and show that we can mitigate it, at least in theory. to cherry pick a few significant findings ( page numbers in parentheses ) : - on the one hand, 79 % of libraries are never upd…"
T1195.001Compromise Software Dependencies and Development Tools
34%
"findings about our ability to control supply chain risk are mixed, but they help quantify a problem and show that we can mitigate it, at least in theory. to cherry pick a few significant findings ( page numbers in parentheses ) : - on the one hand, 79 % of libraries are never upd…"

Summary

It can be easy to give in to frustration and pessimism during catastrophic events. But there are signs that not all is lost, even in the world of software dependencies.