Skybox 13.2 empowers organizations to identify and remediate vulnerabilities

Skybox Security announced Skybox 13.2, introducing enhancements to its Vulnerability and Threat Management solution.

These updates mark a significant milestone in vulnerability prioritization and attack surface management, empowering organizations with clarity and control over their cybersecurity posture.

Traditional vulnerability scanners often struggle to effectively prioritize risks, typically relying on the general severity of vulnerability without accounting for company-specific context. This leaves organizations facing many thousands of critical vulnerabilities and does little to reduce the risk of cyber threats.

Skybox offers an advanced Vulnerability and Threat Management solution that effectively tackles the security challenges of vulnerabilities by prioritizing them. This is achieved by combining industry-standard CVSS severity with customer-specific insights such as an asset’s business importance, the network accessibility of a vulnerability, and known exploit data.

This latest version extends the existing multifactor prioritization with new predictive analytics, which score each vulnerability based on the likelihood of a future exploit. By forecasting the probability of a future exploit, prioritization is more precise, focusing teams on vulnerabilities that pose the highest risk.

“Prioritization in cybersecurity has always been a juggling act. We recognize that exploitability is paramount in prioritization, as it determines an attacker’s potential for misusing a vulnerability,” said Mordecai Rosen, CEO of Skybox Security. “Armed with the knowledge these new product updates provide, organizations can swiftly identify which vulnerabilities pose the most risk now — and in the future, including ones that may not have an exploit available yet. This actionable intelligence empowers them to make strategic resource allocation decisions, ensuring their defenses are focused on protecting the most vulnerable and valuable assets.”

Key features of the new release include:

• Predictive vulnerability exploitability: Skybox’s innovative predictive analytics engine forecasts the likelihood of future vulnerability exploitation, enabling organizations to preemptively address emerging threats before they materialize.
• Enhanced attack surface management: Users now gain visibility into all applications within the organization, along with their relevant assets and network services, empowering organizations to understand their complete attack surface.
• Integration with Palo Alto Prisma Cloud: Skybox now incorporates misconfiguration alerts from Palo Alto Prisma Cloud, enhancing asset risk scoring and prioritization across cloud-native technology stacks.
• Consolidated vulnerability management: With support for information technology, operational technology, and cloud vulnerability management initiatives, organizations can streamline their security efforts using Skybox’s comprehensive solution.
• Immediate action recommendations: Detailed analysis and recommended security controls enable organizations to take immediate action to mitigate risks, reducing exposure gaps until patches can be applied.

These enhancements address critical challenges faced by organizations, delivering key benefits like:

• Customer-specific risk scoring: By factoring in the business impact and exposure of vulnerabilities, organizations can prioritize with precision, focusing on the vulnerabilities that truly matter.
• Exposure analysis: Skybox’s understanding of the underlying network infrastructure allows it to factor exposure into prioritization calculations, ensuring that vulnerabilities are addressed based on their real-world risk.
• Comprehensive application visibility: The enhanced Model Explorer provides a comprehensive view of an organization’s application landscape, facilitating a deeper understanding of application interactions and network services.

“Organizations no longer have to feel like they are scrambling to stay ahead,” said Adi Dubin, VP of Product Management at Skybox. “By integrating predictive insights, industry-standard metrics, and customer-specific risk-scoring metrics, Skybox empowers organizations to rapidly identify and remediate vulnerabilities, reducing exposure and protecting their critical assets.”