Operationalizing VulnDB for Exposure Management and Red Teaming Operations

Air Canada, a leading global airline, operates in a complex threat environment with substantial vulnerability exposure. By implementing innovative, threat-centric strategies, Air Canada has streamlined its vulnerability management, enhanced interdepartmental collaboration, and minimized operational disruptions.

In this FUSE presentation, Kyle Howson, Senior Manager of Cyber Threat Hunting at Air Canada, shares his team’s approach to vulnerability prioritization, offering actionable steps to bolster organizational security.

• Efficient Vulnerability Prioritization: By focusing on high-risk vulnerabilities, Air Canada has reduced unnecessary patching, ensuring critical systems remain uninterrupted.
• Real-Time Threat Awareness: Access to timely, actionable threat intelligence enables Air Canada’s security team to quickly address active threats, optimizing both resource allocation and response times.
• Enhanced Team Collaboration: Strengthened collaboration across security, patch management, and red teams has fostered a unified defense system that supports uninterrupted operations.

“Traditional vulnerability management is dead. We’re now able to prioritize real threats instead of wasting time on vulnerabilities that don’t matter.” – Kyle Howson, Senior Manager, Cyber Threat Hunting, Air Canada