CISA performance goals program trims exploited CVEs

Cybersecurity Dive December 6, 2023
David Jones

Organizations enrolled in the agency’s vulnerability scanning program are showing improved security, but the reduction in exploitable internet-facing services is incremental.

Dive Brief:

• The Cybersecurity and Infrastructure Security Agency said it is making progress toward reducing security risk since the October 2022 release of its cybersecurity performance goals program, the agency said Tuesday.
• Since the release of the CPG program, organizations enrolled in the agency’s vulnerability scanning service have reduced their average number of known exploited vulnerabilities by about 20%.
• Organizations also saw more incremental changes in reducing the number of exploitable services facing the public internet, with a 1% decline, CISA said. The agency found slight reductions in the use of remote desktop protocol and remote...

Today's Sponsors

Today's Sponsor