Vulnerability scanning
Also called: vulnerability scan · vulnerability scanner
Using automated tools to check hosts, websites and network devices against known vulnerabilities and insecure settings, producing a list of things to fix. Results are usually long, so rank them by how important the asset is, whether it faces the internet, and whether the flaw is being exploited in the wild. Scanning only finds known issues and does not replace a penetration test.
Further reading: csrc.nist.gov
From the Security Academy
Vulnerability Scanning, Penetration Testing and Red Teaming: How They Differ, How Often, and Which to Buy
Scans find known flaws, pentests test whether you can be breached, red teams test detection and response. Blind spots, required frequencies, scoping, reports.
15 min read ·
Advisories that mention this term
Addcn says attackers bypassed 591's login checks; the firm has patched the flaw and rotated keys
According to iThome, on the evening of August 20, Addcn Technology (5287) issued a cybersecurity material announcement on the Market Observation Post System (MOPS) disclosing an abnormal website access incident .