Trending Vulnerability Scanning Discussions

With respect to vulnerability discovery, which has more vulnerabilities, well known system or less used system (for example Windows and Ubuntu)? ‎

What is the power of vulnerability?‎

Vulnerability vs PEN testing. Which one is required for PCI compliance? My understanding is only PCI vulnerability scan is required. Comments?‎

What is Vulnerability management?‎

 

Answer added by  Malik Muhammad, Information Security Officer, Golden Chip Company
7 years ago

Both Are required, VA quarterly, and PT yearly....

 

Answer added by  ahmed reda, Information Security Engineer, Security Meter
7 years ago

The Both are required. quarterly vulnerability scanning and yearly PEN testing

 

Answer added by  Mohamed Mamdouh
7 years ago

you actually need both for PCI DSS compliance but in a different way... for PEN testing you need one internal and one external test during the year and one after any majo ... See More

 

Answer added by  Deleted user
7 years ago

According to PCI DSS 3.0 you need to perform penetration testing once a year as minimum and on every major change in the enviroment. This also makes sense as vulnerabilit ... See More

 

Answer added by  Mahmoud Bin Saleh, مهندس تقنية معلومات, مؤسسة السديري للمشاريع الأسكانية
8 years ago

A neglect of certain programming codes for sending data to and from the server, which provides an opportunity for vulnerability. Also one of the most important reasons ... See More

 

Answer added by  Deleted user
9 years ago

windows has vulnerabilities