Ka la 17 Hlakubele, 2025, Foramo ea Likarabelo tsa Liketsahalo le Lihlopha tsa Tšireletso (FIRST) e lokolitse EPSS Version 4, e leng tsoelo-pele e kholo taolong ea bofokoli ba lintlha tsa EPSS. Ho fapana le mehlala ea setso joalo ka CVSS e shebaneng le botebo ba khopolo-taba, moralo oa lintlha tsa EPSS o bolela esale pele hore na ke litaba life tse ka sebelisoang hampe matsatsing a 30 a tlang. Sena se thusa mekhatlo ho tsepamisa maikutlo litšokelong tsa 'nete ho e-na le ho senya nako litabeng tse nang le tšusumetso e tlase.
Ke eng e ncha ho EPSS Version 4?
Mofuta wa bone wa EPSS o tlisa temohisiso e hlakileng ya tshebediso e mpe, tlhahisoleseding e betere, le ho etelletsa pele ka bohlale. Jay Jacobs (Tshireletso ea 'Muso) 'me Qasim Arshad lintlafatso tse arolelanoeng tse isang EPSS v4 boemong bo latelang. Ka lebaka leo, lihlopha joale li fumana matšoao a hlakileng le a potlakileng a hore na bahlaseli ba ka shebana le eng ka mor'a moo.
Bohlale bo Atolositsoeng ba Tšebeliso e Mpe: EPSS joale e beha leihlo tlhahisoleseding ea ts'ebeliso ea 'nete ea lefats'e bakeng sa bofokoli bo fetang 10,000 khoeli le khoeli - e eketsa precision ea Bofokoli ba lintlha tsa EPSS noha.
Kopanyo ea Malware le Endpoint: EPSS v4 e eketsa telemetry ho tsoa lits'ebetsong tsa ho lemoha lintlha tsa ho qetela le lisebelisoa tsa tlhahlobo ea malware, e lumellang lihlopha tsa ts'ireletso ho bona Sephetho sa EPSS dipaterone ka potlako.
Moelelo o Batsi oa Kotsi: E boetse e sekaseka mehloli e makholo ea ts'ireletso—li-RSS feeds, li-blog, liforamo—ho fana ka temohisiso e betere ea maemo mabapi le litšokelo tse hlahang.
Ho Hlophisoa ha Lihlopha ho Ntlafalitsoeng: EPSS jwale e arola mefokolo tlasa mefuta e 22 e ka sehloohong ya CWE mme e qhelela ka thoko di-CVE tse HANGWENG, e leng se fedisang lerata le sa hlokahaleng ho EPSS litlhahlobo tsa lintlha.
Bokgoni bo Pakiloeng ho CVSS: Lithuto tse ikemetseng li bontša hore EPSS v4 e fokotsa boiteko ba ho lokisa ka makhetlo a fetang 8 ha ho bapisoa le mekhoa e thehiloeng ho CVSS, haholo-holo ha ho beoa pele bofokoli bo bongata.
U Batla ho Dive ka ho teba?
Na o batla tlhaloso e felletseng ea taolo ea bofokoli ba lintlha tsa EPSS? U se ke ua fetoa ke tataiso ea rona ea mohato ka mohato ea ho lokisa seo e hlileng e leng sa bohlokoa.
Xygeni + EPSS v4: Lokisa Maemo a Bohlokwa a Bohlokoa Haholo
Xygeni e kopanya lintlha tsa bofokoli ba EPSS ka kotloloho bofokoling ba eona li-funnel tsa ho beha lintho peleKahoo ho e-na le ho lelekisa lintlha tsohle tse phahameng tsa CVSS, lihlopha li tsepamisa maikutlo ho seo e hlileng e leng sa bohlokoa.
Ka ho kopanngoa ha monyetla oa ho sebelisa lintho ka bohlale, ho fihlella lintho ka bohlale le maemo a khoebo, lintho tse tlang pele lia hlaka. Ka lebaka leo, bofokoli ba lintlha tsa EPSS bo bakang kotsi ea 'nete bo lokisoa kapele.
Mohlala oa Xygeni oa ho Beha Pele Lintho ka Botlalo o Akaretsa:
- Lintlha tsa ho Sebelisa Hampe tsa EPSS: E sebedisa EPSS v4 ho hlwaya di-vector tse ka bang teng tsa tlhaselo matsatsing a 30 a tlang.
- Bokhoni ba ho Fihlella Nako ea ho Run: E tiisa hore na khoutu e kotsing e sebetsa tlhahisong.
- Temohisiso ea Bohlokoa ba CVSS: E eketsa moelelo o pharaletseng mabapi le tšusumetso e ka bang teng tsamaisong.
- Moelelo oa Khoebo: E sefa diphihlello tse itshetlehileng hodima bohlokwa, kutlwisiso ya sistimi, le kotsi ya tshebetso.
Hammoho le tlhahlobo ea moelelo oa Xygeni, temohisiso ena e hlahella ka ho toba kahare CI/CD pipelinele kotsi dashboards. Ka hona, ho beha pele bofokodi ho fetoha bo iketsahallang, ba nako ea sebele, 'me bo tsamaisana le tsela eo software e hahoang le ho sebelisoa ka eona.
Li-Funnel tsa ho Beha Pele: Setsi sa Hao sa Taolo bakeng sa Taolo ea Kotsi ea Lintlha tsa EPSS
Taba ea pele, Xygeni's Prioritization Funnels e sebelisa li-filter tse nang le mekhahlelo ho pholletsa le liphuputso tsohle—SAST, SCA, CI/CD ditlhophiso, IaC ditempele, le diphiri. Ka lebaka leo, dihlopha di ka hlalosa melao e ikgethileng kapa e seng e ntse e le teng ho pepesa bofokodi bo hlokang tlhokomelo e le kannete.
Ho feta moo, li-funnel tse hahiloeng kahare bakeng sa tikoloho ka 'ngoe (SAST, IaC, CI/CD) e fokotsa haholo mathata a nako e sebelisoang ho lokisa lintho 'me, ka nako e ts'oanang, e thusa ho fokotsa mokhathala oa ho falimeha. Ka lebaka leo, lihlopha li ba le litšitiso tse fokolang, tšireletso e betere ea likotsi, le tokiso e potlakileng.
Mehopolo ea ho qetela
Ntle ho pelaelo, EPSS Version 4 e beha tekanyetso e ncha bakeng sa ho beha lintho pele ho latela ts'ebeliso ea ts'ebeliso. Ho feta moo, ha e kopantsoe le ponahalo ea Xygeni ea ho tloha qalong ho isa qetellong le boiketsetso, e notlolla mokhoa o bohlale le o tsepamisitseng maikutlo haholoanyane oa ho laola bofokoli.
Palo feela ea litšokelo e ka ba boima haholo. Leha ho le joalo, ho tsepamisa maikutlo ho etsa phapang e kholo. Ke ka lebaka leo kopanyo ea Xygeni le EPSS v4 e netefatsang hore ho beha pele bofokoli ba lintlha tsa EPSS ho tsamaellana hantle le kamoo lihlopha tsa sejoale-joale li hahang, li lekang le ho romella khoutu kateng—e le hore li lokise mathata a nepahetseng, hona joale.
