Amazon Inspector adds enhanced vulnerability intelligence to its findings
News
This article announces enhanced vulnerability intelligence features added to Amazon Inspector, AWS's vulnerability management service.
- Enhanced findings now include known malware kit names exploiting vulnerabilities
- MITRE ATT&CK framework mapping for better threat context
- CISA Known Exploited Vulnerabilities Catalog (KVEC) dates included
- Exploit Prediction Scoring System (EPSS) scores provided
- Evidence of public events associated with vulnerabilities
- Complements existing CVSS scores and public exploit information
- Data sourced from Amazon research, CISA, and Recorded Future
- Available in all regions where Amazon Inspector operates
Amazon Inspector now provides richer vulnerability context to help organizations better prioritize and address security risks across EC2, ECR, and Lambda workloads.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.