{"id":37820,"date":"2020-10-23T13:08:17","date_gmt":"2020-10-23T13:08:17","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/31693\/FDA-Vuln-Grading-System-Proves-All-Risk-Not-Created-Equal.html"},"modified":"2020-10-23T13:08:17","modified_gmt":"2020-10-23T13:08:17","slug":"fda-vuln-grading-system-proves-all-risk-not-created-equal","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/","title":{"rendered":"FDA Vuln Grading System Proves All Risk Not Created Equal"},"content":{"rendered":"
<\/div>\n
\n

The Food and Drug Administration this week added a new vulnerability grading system designed specifically for medical devices to its list of medical device development tools (MDDTs) \u2013 essentially giving it a final vote of approval as a scientifically valid metric.  <\/p>\n

It\u2019s a long-expected move.  The new rubric, developed for the FDA by MITRE, was first released last year and emphasizes risk to patients rather than ease and scope of exploitation. The concept has been praised by vendors, regulators and researchers alike, as an approach that emphasizes the importance of a common language for risk in the disclosure process. And, they say, it is a model other sectors might want to invest in.  <\/p>\n

If you were to break it into a mathematic equation, risk is impact multiplied by probability. If something is extremely likely to happen, it\u2019s probably a high risk. The traditional measure of the threat of a vulnerability, the Common Vulnerability Scoring System, is largely based on the probability someone might exploit something.  <\/p>\n

CVSS was not, however, designed to measure the depth of impact that a vulnerable medical device might have. Someone hacking a pacemaker can kill them. Even if it is low probability, the impact is unacceptable. But without a common metric, it\u2019s almost impossible for researchers and vendors to discuss how much impact a vulnerability packs.  <\/p>\n

\u201cOften times, there\u2019s a lot of back and forth about what a vulnerability means,\u201d said Penny Chase, a senior principal scientist at MITRE who worked on the rubric.  <\/p>\n

The new rubric, treated as an add on to CVSS, takes all risk into account. <\/p>\n

MITRE published its first version of the metric in January of 2019. But, without the FDA\u2019s MDDT decision,  CyberMDX head of research Elad Luz submitted vulnerabilities to device manufacturers this year and had the new scoring system turned away.  <\/p>\n

\u201cVendors rejected the rubric as a draft. But now on I expect they\u2019ll accept it,\u201d said Luz.  <\/p>\n

The FDA, notes Chase, is loath to outright issue new requirements to tell companies how to do something. Announcing acceptance of a new tool or initiative, however, is generally interpreted as a more-than-gentle nudge to either use it, or do something very similar.  <\/p>\n

The change in accounting can make a big difference in scores. <\/p>\n

Last year, Luz reported to GE CVE-2019-10966, a vulnerability in certain anesthesia machines that the company then mitigated. It scored as an almost perfectly medium risk \u2013 5.3 on the traditional CVSS scale. But, despite the score, anyone exploiting the flaw could put a patient at serious risk tampering with the composition of gasses and pressures. By Luz\u2019s math, the new rubric gives the vulnerability a 9.1. <\/p>\n

Changing the way companies evaluate the severity of risk changes how they prioritize which bugs to stomp out in which order.  <\/p>\n

Chase said during the pilot program testing the rubric, vendors reported it also changed how they approached patching a problem. Rather than addressing a single issue, she said, they might address preventing a possible outcome from any issue.  <\/p>\n

There are arguments against risk-based models. Thaddeus Bender, a security solutions architect at the bug bounty platform HackerOne, said that the concept of risk can seem fuzzy and hard to prove. But risk is by and large a well accepted concept, especially when backed by a regulatory agency like the FDA.  <\/p>\n

Chase, Bender and several other experts believe that several other industries could benefit by similar sector-specific rubrics. Any industry where a cyberattack could risk safety, physical damage or even uptime might benefit from their own addition to the CVSS.  <\/p>\n

\u201cIt would be particularly useful in small and medium-sized companies,\u201d said Kurt John, chief cybersecurity officer at Siemens, noting that they often have less infrastructure to evaluate bugs. \u201cBut, even for Siemens.\u201d  <\/p>\n

Risk, he believes is an important concept to consider in vulnerability disclosure, but a tough one to generalize. You would need sector specific guidelines, he said, to avoid judging the risk to a food maker by power plant standards.  <\/p>\n

\u201cAll industries need a Rosetta Stone \u2013 a way for researchers and industry to talk about risk in the same language,\u201d said Casey Ellis, chief technology officer of the disclosure platform Bugcrowd.  <\/p>\n

He added that standardize communication traditionally results in the identification of more vulnerabilities. <\/p>\n

For now, Ellis believes that just seeing the rubric pass the FDA is an accomplishment. <\/p>\n

\u201c2020 brought into focus how important medical devices are,\u201d he said.<\/p>\n<\/p><\/div>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":37821,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[60],"tags":[9002],"class_list":["post-37820","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-packet-storm","tag-headlinegovernmentusaflawscience"],"yoast_head":"\nFDA Vuln Grading System Proves All Risk Not Created Equal 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"FDA Vuln Grading System Proves All Risk Not Created Equal 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-10-23T13:08:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/fda-vuln-grading-system-proves-all-risk-not-created-equal.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"FDA Vuln Grading System Proves All Risk Not Created Equal\",\"datePublished\":\"2020-10-23T13:08:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/\"},\"wordCount\":848,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/10\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal.jpg\",\"keywords\":[\"headline,government,usa,flaw,science\"],\"articleSection\":[\"Packet Storm\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/\",\"name\":\"FDA Vuln Grading System Proves All Risk Not Created Equal 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/10\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal.jpg\",\"datePublished\":\"2020-10-23T13:08:17+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/10\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/10\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal.jpg\",\"width\":1200,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fda-vuln-grading-system-proves-all-risk-not-created-equal\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,government,usa,flaw,science\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinegovernmentusaflawscience\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"FDA Vuln Grading System Proves All Risk Not Created Equal\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"FDA Vuln Grading System Proves All Risk Not Created Equal 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/","og_locale":"en_US","og_type":"article","og_title":"FDA Vuln Grading System Proves All Risk Not Created Equal 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-10-23T13:08:17+00:00","og_image":[{"width":1200,"height":720,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/fda-vuln-grading-system-proves-all-risk-not-created-equal.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"FDA Vuln Grading System Proves All Risk Not Created Equal","datePublished":"2020-10-23T13:08:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/"},"wordCount":848,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/fda-vuln-grading-system-proves-all-risk-not-created-equal.jpg","keywords":["headline,government,usa,flaw,science"],"articleSection":["Packet Storm"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/","url":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/","name":"FDA Vuln Grading System Proves All Risk Not Created Equal 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/fda-vuln-grading-system-proves-all-risk-not-created-equal.jpg","datePublished":"2020-10-23T13:08:17+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/fda-vuln-grading-system-proves-all-risk-not-created-equal.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/fda-vuln-grading-system-proves-all-risk-not-created-equal.jpg","width":1200,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/fda-vuln-grading-system-proves-all-risk-not-created-equal\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,government,usa,flaw,science","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinegovernmentusaflawscience\/"},{"@type":"ListItem","position":3,"name":"FDA Vuln Grading System Proves All Risk Not Created Equal"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/37820","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=37820"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/37820\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/37821"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=37820"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=37820"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=37820"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}