Enhanced exposure score in Defender Vulnerability Management
Analysis / inference: Microsoft has generally released an updated exposure score model in Defender Vulnerability Management that factors in EPSS and asset criticality.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Endpoint - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Defender Vulnerability Management introduced a generally available exposure score model incorporating EPSS data alongside internet-facing status and asset criticality factors to improve risk prioritization.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisThe new exposure score model natively integrates Exploit Prediction Scoring System (EPSS) data and asset criticality context to give SOC and vulnerability management teams a more accurate, risk-prioritized view of their environment.
Vulnerability queues and prioritization lists within Defender Vulnerability Management may shift as the new algorithm adjusts scores based on exploit prediction and asset context.
Section 03 · Recommended actions
- Review the updated Microsoft documentation regarding exposure scores and security recommendations.
- Familiarize your vulnerability management team with the revised risk scoring output.
- Review your organization's current exposure score baseline in Microsoft Defender Vulnerability Management.
- Verify how internet-facing asset status and asset criticality weighting are currently configured in your tenant.