Addressing the challenge of non-patchable security [Q&A]

While many organizations have solutions in place to identify patchable CVEs, non-patchable security issues such as misconfigurations continue to provide threat actors with consistent access points to exploit organizations. We spoke to Jason Mar-Tang, field CISO at Pentera, to discuss the challenge of non-patchable security issues vs. CVEs, what makes them so much more difficult to identify, the challenges of remediation, and what standards organizations should implement to tackle this challenge. BN: What are the key differences between patchable and non-patchable security issues? JMT: On the base level as the names imply, patchable vulnerabilities are those where the issue can… [Continue Reading]