CVE Insights "News" tab

Applies to: Patch My PC CVE Insights

The News tab of Patch My PC’s (PMPC’s) Common Vulnerabilities and Exposures (CVE) product, CVE Insights, shows a curated News Feed of News Articles written by our security professionals related to CVEs.

It consists of the following two tabs:

• All - which lists all CVEs and is selected by default.

• Personal – which only shows you the CVEs you have created Alerts for.

Note

If you have a subscription that includes PMPC Cloud and have signed in to your PMPC Cloud Company from CVE Insights, then the Company tab will appear, showing only those CVEs affecting your company, based on discovery data from your Intune environment.

For each CVE, in the News Feed, we show:

• The name of the CVE

• A brief summary

• The CVSS Max Score (Common Vulnerability Scoring System), where 10 is highest, 0 is lowest.

Note

The Max Score refers to the fact that a given news item could refer to multiple CVEs and represents the maximum or worst CVSS score across the CVEs referenced.

See the Qualitative Severity Ratings section of Vulnerability Metrics for more information.

• Whether PMPC patches are available

• The date the CVE was released.

You can scroll up and down the list of News Articles, and clicking a specific item expands it to show:

• Additional background information.

• Any related tags, which can be used for filtering your News Feed.

• Linked CVEs section, which tracks which CVEs, if any, the news item is referencing.

• Products Affected section, containing a list of the products affected by this CVE.

• External Links section, containing links to any third party resources related to the CVE.

Clicking on an actual CVE expands it to show:

• CVE number

• CVSS Score

• Vendor

• Status based on the National Vulnerability Database (NVD) Statues

• Publication date

• Date it was last updated

• Source of the CVE

• The ability to add an alert for this vendor

• Description section, containing more background information

• Products Affected section, containing a list of products affected by this CVE and the ability to add an alert for this product

• General Information section, containing more detailed CVSS rating information

• Patches section, which contains details about any available patches

• Vulnerability Intel section, containing:

  • A link to Related CVE Insights News

  • External Links which contains links to background sources of information.

• CVSS Scores section, detailing:

  • CVSS Score

  • Base Severity

  • CVSS Vector

  • Exploitability Score

  • Impact Score

  • Source

  • CVSS Version.

Filtering the News Feed

You can filter your CVE Insights News Feed in the following ways:

• By category

• By tag

Filter the News Feed by Category

To filter the News Feed by category, simply click the category underneath the title graphic of each News Article.

For example, Critical Severity, High Severity, Security News, Zero-Day, amongst others.

Clicking a category changes your News Feed to display a filtered list of News Articles that match the selected category. The selected category name is shown at the top, so you know which category you are sorting your News Feed by.

Filter the News Feed by Tag

Each News Article in the News Feed contains a list of tags.

Clicking a tag within a News Article will change your News Feed to display a filtered list of just the News Articles matching the selected tag. The selected tag name is shown at the top, so you know which tag you are sorting your News Feed by.

Sharing a News Article

To share a News Article, click the share button beside the category (in between the news headline for the News Article and the full title).

The native share window is then displayed, allowing you to share the item in different formats and with the apps configured for your device.

If you share a link to a different platform, when the user clicks the link on that platform, it will automatically open the CVE Insights app on their device (if they have it installed) and load the appropriate News Article.

If the user does not already have the CVE Insights app installed on their device, the web-based version of CVE Insights will be loaded in the browser of their device, and they will also be prompted to install the app on their device from the relevant App Store for their device.