Vulnerability Intelligence: Near Past and Distant Future

Join F5 Labs threat researcher Sander Vinberg for the latest vulnerability intelligence from F5 Labs. This talk will begin at the tactical level by exploring CVE targeting trends, including a recent focus on IoT devices. Sander will also cover the Exploit Prediction Scoring System, an open-source ML system for forecasting vulnerability exploitation. We will unpack how the system works, how F5 contributes to it, and how best to use it to provide insight into your own vulnerabilities and risks. The talk will conclude with an examination of the long-term future of vulnerability management, referencing selected findings from a recent report on the evolving CVE landscape. Through this talk, attendees will learn: - Which vulnerabilities attackers are prioritizing in 2022 and early 2023 - Features, strengths, and weaknesses of the Exploit Prediction Scoring System - How changes to vulnerability publication may impact the future of the CVE system