When Application Vulnerabilities Are First Reported on Social Media: Strategies and Recommendations
The U.S. Department of Energy’s Pacific Northwest National Laboratory reports that one-quarter of software vulnerabilities appear on social media sites—GitHub, Twitter, and Reddit—before they are logged in the National Vulnerability Database. Cybersecurity professionals aren’t the only ones to notice; cyber criminals are busy exploiting this gap. Should professionals tasked with application security be using social media to identify software vulnerabilities? Or is there a better way? In this podcast interview, Contrast Security’s Director of Developer Relations Erik Costlow discusses what challenges this presents to security and development teams and what strategies they can employ to ensure their newly uncovered vulnerabilities are not caught in the crosshairs of cyber criminals.