Musi wa17 Kurume, 2025, Forum of Incident Response and Security Teams (FIRST) yakaburitsa EPSS Version 4, danho guru mukutarisira njodzi dzeEPSS score. Kusiyana nemamodeli echinyakare akadai seCVSS anotarisa pakuoma kwedzidziso, hurongwa hweEPSS score hunofanotaura kuti ndeapi matambudziko angangoshandiswa mumazuva makumi matatu anotevera. Izvi zvinobatsira masangano kutarisa panjodzi chaidzo pachinzvimbo chekupedza nguva pazvinhu zvisina kukanganisa zvakanyanya.
Chii Chitsva muEPSS Version 4?
Shanduro yechina yeEPSS inounza nzwisiso yakajeka yekushandisa, data riri nani, uye kukoshesa zvinhu zvine hungwaru. Jay Jacobs (Kuchengetedzwa Kwemasimba) uye Qasim Arshad Zvichangobva kugoverwa zvinosimudzira EPSS v4 padanho rinotevera. Nekuda kweizvozvo, zvikwata zvino zvava kujeka uye nekukurumidza zviratidzo zvekuti ndezvipi zvinganangwa nevarwi zvinotevera.
Uchenjeri Hwakawedzerwa Hwekushandisa Zvisina Kunaka: EPSS ikozvino inoongorora data rekushandiswa kwepasirese kwevanopfuura 10,000 vasina simba mwedzi wega wega - zvichiwedzera huwandu hwevashandisi vekutanga.cision zve Kusagadzikana kwemamaki eEPSS kufungidzira.
Kubatanidzwa kweMalware neEndpoint: EPSS v4 inowedzera telemetry kubva kumasisitimu ekuona endpoint uye maturusi ekuongorora malware, zvichibvumira zvikwata zvekuchengetedza kuona Chibodzwa cheEPSS mapatani nekukurumidza.
Nyaya yeNjodzi Yakakura: Inoongororawo mazana enzvimbo dzekuchengetedza — maRSS feeds, mablog, maforamu — kuti ipe ruzivo rwakanaka pamusoro penjodzi dziri kubuda.
Kugadziriswa Kwakavandudzwa: EPSS ikozvino inoisa kusava nesimba pasi pemhando dzeCWE dzepamusoro makumi maviri nembiri uye haibatanidzi maCVE AKARAMBIDZWA, ichibvisa ruzha rusina basa mu EPSS kuongororwa kwezvibodzwa.
Kushanda Kwakaratidza Kubudirira Pamusoro peCVSS: Ongororo dzakazvimirira dzinoratidza kuti EPSS v4 inoderedza kuedza kugadzirisa nekanopfuura ka8 kana tichienzanisa nenzira dzinoshandiswa neCVSS, kunyanya kana tichiisa pamberi zvikanganiso zvine huwandu hwakawanda.
Unoda Kunyura Zvakadzika?
Unoda kutsanangurwa kwakazara kwekutarisira njodzi yeEPSS score? Usapotsa gwara redu rematanho-nematanho rekugadzirisa zvinonyanya kukosha.
Xygeni + EPSS v4: Gadzirisa Kusagadzikana Kunonyanya Kukosha
Xygeni inobatanidza chibodzwa cheEPSS chenjodzi zvakananga munjodzi yayo nzira dzekuisa zvinhu pakutangaSaka pachinzvimbo chekutevera mapoinzi ese eCVSS akakwira, zvikwata zvinotarisa pane zvinonyanya kukosha.
Kana zvinhu zvichishandiswa, zvinokwanisika kuwanikwa, uye mamiriro ebhizinesi zvakabatanidzwa, zvinhu zvinonyanya kukosha zvinova pachena. Nekuda kweizvozvo, matambudziko eEPSS score anokonzeresa njodzi chaiyo anogadziriswa nekukurumidza.
Muenzaniso weXygeni weFull-Stack Prioritization unosanganisira:
- Kuongororwa kweEPSS Exploitability: Inoshandisa EPSS v4 kuona mavector angangoitika mumazuva makumi matatu anotevera.
- Kugona Kushanda Munguva Yekushanda: Inosimbisa kana kodhi iri munjodzi ichinyatso shanda mukugadzirwa.
- Kunzwisisa Kuoma Kwepfungwa kweCVSS: Inowedzera mamiriro akafara pamusoro pekukanganisa kungangoitika pahurongwa.
- Mamiriro Ebhizinesi: Inosefa zvakawanikwa zvichibva pakukosha, kunzwisiswa kwehurongwa, uye njodzi yekushanda.
Pamwe chete nekuongorora kwaXygeni, ruzivo urwu rwunobuda zvakananga mukati CI/CD pipelines uye njodzi dashboards. Nokudaro, kukoshesa njodzi kunova otomatiki, panguva chaiyo, uye kunoenderana nekuti software inovakwa sei uye inoshandiswa sei.
Mafunnel Ekuisa Pamberi: Nzvimbo Yenyu Yekutungamirira Kutarisira Kukuvadzwa Kwematambudziko eEPSS Score
Kutanga, Xygeni's Prioritization Funnels inoshandisa mafirita akarongwa pane zvese zvakawanikwa—SAST, SCA, CI/CD magadzirirwo, IaC matemplate, nezvakavanzika. Nekuda kweizvozvo, zvikwata zvinogona kutsanangura mitemo yakagadzirirwa kana yakagadzirwa kare kuti zvionekwe zviri nyore kuti zvisanyanya kuoma zvinoda kutariswa.
Uyezve, ma funnel akavakirwa mukati menzvimbo yega yega (SAST, IaC, CI/CD) zvinoderedza zvakanyanya nguva inopedzerwa pakuongorora matambudziko uye, panguva imwe chete, zvinobatsira kuderedza kuneta kwekukurumidza. Nekuda kweizvozvo, zvikwata zvinosangana nezvinotsausa zvishoma, njodzi dziri nani, uye kugadzirisa nekukurumidza.
Final Thoughts
Pasina mubvunzo, EPSS Version 4 inoisa chiyero chitsva chekushandisa zvinhu zvakakosha. Uyezve, kana zvikasanganiswa nekuonekwa kweXygeni kubva pakutanga kusvika pakupedzisira uye otomatiki, zvinovhura nzira yakangwara uye yakatarisana yekugadzirisa zvikanganiso.
Kuwanda kwekutyisidzira chete kunogona kuva kwakanyanya. Zvisinei, kutarisa kwakakosha kunoita mutsauko mukuru. Ndosaka kubatanidzwa kweXygeni neEPSS v4 kuchivimbisa kuti EPSS score prioritization inoenderana zvakakwana nekuvaka, kuyedza, uye kutumira kodhi yezvikwata zvemazuva ano—saka vanogadzirisa matambudziko akakodzera, izvozvi.
