ENDPOINT VULNERABILITY MANAGEMENT AT SCALE

Summary from the TLDR InfoSec newsletter

A post from Canva outlining its vulnerability management pipeline. The pipeline begins by extracting vulnerability information from its EDR, then utilizing its MDM to automatically push updates for managed applications or when an application is not managed, creating tickets for IT. The post also includes success metrics and a discussion of the results and difficulties of the process.