The UK government’s Vulnerability Monitoring Service (VMS) has made significant strides in enhancing cybersecurity across public sector bodies. By continuously scanning the internet-facing assets of 6,000 public sector organizations, the VMS detects around 1,000 types of vulnerabilities and processes approximately 400 confirmed findings each month. This proactive approach has substantially reduced remediation times, with median fix times dropping from 53 days to 32 days and DNS-specific fix times plummeting from 50 days to just 8 days, an impressive 84% reduction.
These improvements in vulnerability management position the public sector favorably compared to private sector benchmarks. Analysts highlight, however, that the effectiveness of a cybersecurity program also depends on clear communication of business impacts and cultivating strong stakeholder relationships, beyond just advanced technological tools.
In tandem with the VMS results, the UK government has announced a £210 million Cyber Action Plan and the establishment of a new Cyber Profession initiative. These efforts aim to address the cybersecurity skills gaps identified by the National Audit Office, ensuring a robust defense against emerging threats.
The broader infosec news landscape includes notable developments such as Firefox 148 introducing a Sanitizer API to enhance protections against DOM-based XSS attacks. Meanwhile, the FTC decided not to enforce COPPA against websites collecting minors’ personal information solely for age verification purposes. Additionally, changes in cybersecurity leadership see Madhu Gottumukkala being reassigned to DHS, with Nick Andersen stepping in as acting director of CISA. On the regulatory front, UK regulator Ofcom fined a pornography site operator £1.35 million for failing to implement required age checks under the Online Safety Act.
Collectively, these initiatives and developments underscore the dynamic nature of cybersecurity efforts aimed at safeguarding information assets in both public and private sectors.

Collections

The UK government's Vulnerability Monitoring Service (VMS) is scanning internet-facing assets of 6,000 public sector organizations, detecting ~1,000 vulnerability types and processing ~400 confirmed findings monthly. Remediation times have improved significantly, with median fix times dropping from 53 to 32 days and DNS-specific fixes falling 84% from 50 to 8 days. Alongside VMS results, the UK announced a £210 million Cyber Action Plan and a new Cyber Profession initiative to address skills gaps. Other infosec news includes Firefox 148 introducing a Sanitizer API against DOM-based XSS, FTC COPPA enforcement changes, CISA leadership changes with Nick Andersen as acting director, and Ofcom fining a pornography site £1.35 million for failing age verification requirements under the Online Safety Act.

UK Government's Vulnerability Monitoring Service Enhances Cybersecurity for Public Sector