#mtrends — Public Fediverse posts

Patches Now Arrive Late. By a Week https://youtu.be/TagTgrk-dZY #CyberSecurity #ThreatIntelligence #CISO #VulnerabilityManagement #Ransomware #SecurityLeadership #Mandiant #MTrends

Remediation Programs Often Fail to Validate Fixes

The alarming truth is that remediation programs often fall short, with a staggering mismatch between the speed of exploits and fixes - Mandiant's report reveals a mean time to exploit of just -7 days, while Verizon's data shows a median remediation time of 32 days.

https://osintsights.com/remediation-programs-often-fail-to-validate-fixes?utm_source=mastodon&utm_medium=social

#VulnerabilityManagement #ExploitDevelopment #RemediationPrograms #Mtrends #Dbir

Everyone knows how much I love #Mandiant and the #MTrends report. It's my favorite source. However, this figure demonstrates why pie charts are absolutely worthless as a means of displaying quantitative information, compared to a simple table.

WITHOUT LOOKING AT THE TABLE, tell me what percentage of the initial infection (ugh, they are not "infections") vectors did the Brute Force category occupy?

To answer that question, you have to not be color blind. Then you have to find the appropriate color on the right. Last you find it in the pie chart. What a waste of time!

Now check the table. You're finished in a millisecond.

One other point: the data should have included raw numbers, not just percentages.

Pie charts are a monstrosity. #StopUsingPieCharts #EdwardTufte

Everyone knows how much I love #Mandiant and the #MTrends report. It's my favorite source. However, this figure demonstrates why pie charts are absolutely worthless as a means of displaying quantitative information, compared to a simple table.

WITHOUT LOOKING AT THE TABLE, tell me what percentage of the initial infection (ugh, they are not "infections") vectors did the Brute Force category occupy?

To answer that question, you have to not be color blind. Then you have to find the appropriate color on the right. Last you find it in the pie chart. What a waste of time!

Now check the table. You're finished in a millisecond.

One other point: the data should have included raw numbers, not just percentages.

Pie charts are a monstrosity. #StopUsingPieCharts #EdwardTufte

The dwell time for non ransomware #cybersecurity investigations dropped by half from the last #MTrends report. Decreasing dwell time is the single best indicator of improving security known to the industry, IMO. That's my usual push back against the "it's always getting worse" narrative, but 17 days is still only representative for the security 1-10% who can afford a #Mandiant investigation.

The dwell time for non ransomware #cybersecurity investigations dropped by half from the last #MTrends report. Decreasing dwell time is the single best indicator of improving security known to the industry, IMO. That's my usual push back against the "it's always getting worse" narrative, but 17 days is still only representative for the security 1-10% who can afford a #Mandiant investigation.