Don't let CVEs distract you: Shift your AppSec team's focus to malware

Chasing vulnerabilities can be a time-consuming and time-wasting pursuit for application security (AppSec) teams. A big part of the problem has been the sheer volume of vulnerabilities being reported in recent years, which increases the chances of invalid reports slipping through the system.

As ReversingLabs noted in its report in 2022, flaws in open-source software are contributing to a sharp rise in reports to the National Vulnerability Database (NVD), but emerging software supply chain attacks warrant a rethink of …

application application security appsec big consuming cves don focus malware noted problem reports reversinglabs security system team teams vulnerabilities