Talos Takes

What's new with CVSS 4.0, and does it really change anything?

January 19, 2024 Cisco Talos Episode 169
Talos Takes
What's new with CVSS 4.0, and does it really change anything?
Show Notes

We're talking about vulnerabilities this week with Jerry Gamblin from Cisco Vulnerability Management. Jerry joins the show to talk about the release of CVSS 4.0 this year — the newest method the security community will use to score the severity of certain vulnerabilities. Jerry discusses what makes this scoring system different from previous iterations if it changes how he views the term "severe" and how that fits into Cisco's overall vulnerability management processes.