Many breaches do not start with a clever new attack. They start with a weakness that was already known and simply had not been fixed. Vulnerability management is the ongoing work of finding those weaknesses across an organisation, judging which ones matter most, and getting them fixed before an attacker gets there first.
You'll start with the vulnerability management lifecycle and how its stages fit together. Then you'll learn how CVE and CVSS describe and score weaknesses, see how a vulnerability scanner is run and its results read, and finish with prioritisation, since no team can fix everything at once and has to decide what to tackle first.
Once you're comfortable here, move on to Automation & SOC Operations to see how security teams scale their work and run day to day.
The six stages of the ongoing cycle organisations use to find, rank, scan, respond to, verify, and improve how they handle security weaknesses.
A beginner-friendly overview of the Common Vulnerability Scoring System and how exploitability, impact, and scope combine to rate a vulnerability's severity.
A hands-on tutorial for setting up Nessus Essentials in a home lab, running a first vulnerability scan, and reading the results.
How the Exploit Prediction Scoring System, created by its co-chair, helps teams decide which vulnerabilities to fix first when used alongside CVSS.