vulnerability frameworks
CISA KEV
Known Exploited Vulnerabilities catalogue. If it is here, someone is using it. Treat exposure as urgent.
Short, tagged, searchable.
Terms, frameworks, and concepts used on an Australian defensive desk. No exploit steps.
AllIRacsc-glossaryau-compliancecloudconceptsdetectionframeworkshardeningidentityloggingmalwarenetworkvulnerability
6 entries
concepts vulnerability
CVE vs CVSS
CVE names a vulnerability. CVSS scores a model of severity. Neither tells you if you are exposed or if it is being used.
vulnerability hardening acsc-glossary
Patch
A vendor fix for a hole or a defect. Installing it is patching. Explaining why you did not is an exception with an expiry date.
vulnerability concepts acsc-glossary
Vulnerability
A weakness in requirements, design, build, or operations that can be tripped or abused and break the security policy.
vulnerability hardening acsc-glossary
Vulnerability management
Find, rank, fix, check. Known-exploited and exposure beat a 400-page scanner PDF.
vulnerability acsc-glossary
Zero-day
A usable flaw the vendor has not disclosed or patched yet. Your window is not a blog post. It is exposure.
Definitions informed by ASD's ACSC glossary. cyber.gov.au glossary