MDR insights: using vulnerability data to inform remediation strategies

Expel’s MDR report reviews 2024 CVE exploitation trends observed in their SOC, lists the most frequently seen vulnerabilities (including Exchange RCEs, Log4j, and an Outlook elevation-of-privilege), explains how EPSS and the CISA Known Exploited Vulnerabilities catalog inform their remediation prioritization, and recommends focusing remediation and alerting on privilege-escalation and remote code execution vulnerabilities to reduce risk and alert fatigue.