Combine Qualys TruRisk™ and MITRE ATT&CK to Adopt Threat-Informed Defense to Reduce Risk

Qualys announces MITRE ATT&CK Matrix Prioritization in VMDR, integrating TruRisk with ATT&CK to give an attacker-centric view that maps vulnerabilities, misconfigurations, and EDR incidents to tactics and techniques for threat-informed defense and remediation. The post highlights top tactics and techniques observed by Qualys TRU and illustrates how chained CVEs (e.g., CVE-2023-22515, CVE-2023-28252, CVE-2023-22518) can enable ransomware scenarios, then demonstrates how the platform helps prioritize affected assets, automate patching, and remediate misconfigurations to reduce risk.