Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Stakeholders / Everyone with PHP in the path / Edge, WAF and detection vendors / Threat intelligence and detection
Threat intelligence and detection: its risk register
Amazon's honeypots, Huntress, watchTowr and the community authors of detection rules: the eyes that say whether exploitation is happening.
Kind group · Assigned here 4 · In its register 4 · in the story as Amazon, Huntress, watchTowr, Community detection authors
The register
Assigned here, or arriving through a part of this stakeholder. The part played is the one recorded for whoever holds the assignment.
| Risk | Rating | Kind | Part played | Controls |
|---|---|---|---|---|
| R03 Exploitation outpaces patching | 20 critical | Security | informer | CISA KEV and BOD 22-01 KEV-entry, CISA KEV and BOD 22-01 BOD22-01, NIST CSF 2.0 DE.CM-01, NIST SP 800-53 SI-4 +3 |
| R03-1 Attempts before disclosure | 15 high | Security | informer | NIST CSF 2.0 ID.RA-02, ISO/IEC 27001 A.5.7, NIST SP 800-53 SI-4, PCI DSS 12.10.1 |
| R03-3 Exploited in the wild without anyone being able to show it | 12 high | Governance | informer | CISA KEV and BOD 22-01 KEV-entry, NIST CSF 2.0 ID.RA-02, NIST CSF 2.0 GV.RR-01 |
| R03-4 Detections built on a proof of concept with the wrong mechanism | 12 high | Security | treater | NIST SP 800-53 RA-5, SOC 2 CC7.1, NIST CSF 2.0 ID.RA-01 |
Where its risks sit
The standards its register touches
NIST CSF 2.0 (4), CISA KEV and BOD 22-01 (2), NIST SP 800-53 (2), ISO/IEC 27001 (2), MITRE ATT&CK (1), PCI DSS (1), SOC 2 (1)