Roy Horev

Recent Posts

How to Combine Vulnerability Management with Pen Testing

Posted by Roy Horev on May 23, 2019 7:02:06 AM

For an organization to be confident it must have a solid security posture, and for this, regular testing is key. Two types of testing are critical to assessing security posture – penetration testing and vulnerability scans.

Read More

Topics: vulnerabilities, Pen Testing

Without Asset Management, You're Lost. Why Vulnerability Management Starts with Your Assets

Posted by Roy Horev on May 14, 2019 1:35:01 PM

In the broadest sense, “Asset Management” means managing the complete life-cycle of every corporate asset, from procurement to safe disposal. Effective Asset Management ensures that every expense fits both corporate goals and security standards, including guidelines and policies related to Vulnerability Management, such as how vulnerabilities are prioritized and resolved.

Read More

Topics: vulnerabilities

Vulnerability Remediation in the CI/CD Pipeline - Not Just a Coding Issue

Posted by Roy Horev on Apr 4, 2019 7:27:24 AM

Vulnerability remediation was once considered a straightforward process. Scanning software identified potential vulnerabilities and notified the system administrator, who took over from there. “Vulnerability” was seen as a coding issue, so manually checking and patching code became the standard method of remediation despite being slow and not always effective.

Read More

Topics: vulnerability remediation

A History of Vulnerability Management

Posted by Roy Horev on Mar 14, 2019 9:02:15 AM

The number of known vulnerabilities has exploded in recent years. With enterprises using more software solutions, open-source, cloud, Internet of Things, and more, it’s no wonder the increase in security flaws has skyrocketed.

Read More

Topics: vulnerabilities, Cybersecurity

How can Enterprises Stop Failing their Vulnerability Management Teams?

Posted by Roy Horev on Mar 7, 2019 8:33:55 AM

Everyone knows that CISOs are losing sleep over the dangers that vulnerabilities could potentially cause their businesses, and with good reason. But the problem goes beyond the continuous growth in vulnerabilities.

Read More

Topics: vulnerability remediation, vulnerabilities, DevSecOps

Why Response is the Most Difficult Part of Vulnerability Management

Posted by Roy Horev on Feb 21, 2019 10:15:00 AM

“If it were easy, everyone would do it.”

With the never-ending headlines of major breaches caused by vulnerabilities, it’s clear that vulnerability management isn’t easy. According to the Ponemon Institute, the average total cost of a breach in 2018 ranged from between  2-7 million dollars, depending on the number of compromised records.

Read More

Topics: vulnerability remediation, vulnerabilities

Vulcan Cyber's Must Attend Events for CISOs in 2019

Posted by Roy Horev on Feb 12, 2019 10:00:00 AM

No matter what IT field you work in, staying on top of the latest technologies and trends is a must, especially in cybersecurity. Just as a good security plan requires continuous monitoring, a good CISO needs continuous learning. A top-notch security conference can be the most efficient and effective way for CISOs to stay current while networking with peers.

Read More

Topics: Cybersecurity

Saving Time and Money with Vulnerability Remediation at Scale

Posted by Roy Horev on Feb 7, 2019 7:21:06 AM

Security and IT teams are currently fighting a flood of software vulnerabilities. In 2018 alone, a record 16,555 were reported. Of these, thousands affected every cloud-native SaaS or enterprise company. Some of these vulnerabilities were only potentially dangerous, but others affected tens of thousands of customers.

Read More

Topics: vulnerability remediation, vulnerabilities

Patch Management Best Practices for Production Environments

Posted by Roy Horev on Jan 23, 2019 6:49:55 AM


On the surface, patch management sounds like a straightforward task. But patching in a production environment means making a change to potentially every device in the enterprise. Let’s take a look at some of the complex challenges of patching production environments and some ways to improve the process.

Read More

Topics: Patching

Security and DevOps: Getting them to Work Together

Posted by Roy Horev on Dec 27, 2018 9:39:40 AM

DevOps has revolutionized the pace at which new iterations of applications are released to meet the needs of customers. By nature, security teams are focused on securing company assets and data, which others may see as a roadblock to productivity. The tension between these two groups can sometimes be palpable.

Read More

Topics: DevSecOps, Cybersecurity