REMEDIATING VULNERABILITIES USING SOFTWARE UPDATE MANAGEMENT PLATFORM WITH INTEGRATED THREAT INTELLIGENCE

1 . A method for vulnerability remediation, comprising:

identifying a vulnerable software package among a plurality of software packages based on cybersecurity data indicating a vulnerability;

identifying at least one vulnerable software image of a plurality of software images by determining that the at least one vulnerable software image contains the vulnerable software package based on a plurality of files, wherein each of the plurality of software images is built based on a corresponding file of the plurality of files, wherein each file of the plurality of files includes a set of instructions for combining a subset of the plurality of software packages in order to build the corresponding software image of the plurality of software images; and

performing at least one remediation action with respect to the at least one vulnerable software image.

2 . The method of claim 1 , wherein performing the at least one remediation action includes modifying a deployment of at least a portion of the at least one vulnerable software image.

3 . The method of claim 2 , wherein performing the at least one remediation action includes pulling a deployment of at least a portion of the at least one vulnerable software image.

4 . The method of claim 2 , wherein performing the at least one remediation action includes redeploying at least a portion of the at least one vulnerable software image.

5 . The method of claim 2 , wherein performing the at least one remediation action includes rebuilding at least a portion of the at least one vulnerable software image based on the plurality of files.

6 . The method of claim 2 , wherein the at least one vulnerable software image is a plurality of vulnerable software images, further comprising:

determining a subset of the plurality of vulnerable software images to be remediated based on a vulnerability status of each of the plurality of vulnerable software images, wherein the deployment of the determined subset of the plurality of vulnerable software images is modified.

7 . The method of claim 6 , wherein the vulnerability status of each of the plurality of vulnerable software images indicates whether the vulnerable software image contains a vulnerability that is actively being exploited, wherein the determined subset of the plurality of vulnerable software images is at least one vulnerable software image of the plurality of software images which contains a vulnerability that is actively being exploited.

8 . The method of claim 1 , further comprising:

generating the plurality of software packages, wherein each software package of the plurality of software packages is generated using a respective set of code; and

building the plurality of software images based on the plurality of files.

9 . The method of claim 1 , wherein each software package is a unit of code defined with respect to at least one function.

10 . A non-transitory computer-readable medium having stored thereon instructions for causing a processing circuitry to execute a process, the process comprising:

identifying a vulnerable software package among a plurality of software packages based on cybersecurity data indicating a vulnerability;

identifying at least one vulnerable software image of a plurality of software images by determining that the at least one vulnerable software image contains the vulnerable software package based on a plurality of files, wherein each of the plurality of software images is built based on a corresponding file of the plurality of files, wherein each file of the plurality of files includes a set of instructions for combining a subset of the plurality of software packages in order to build the corresponding software image of the plurality of software images; and

performing at least one remediation action with respect to the at least one vulnerable software image.

11 . A system for vulnerability remediation, comprising:

a processing circuitry; and

a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:

identify a vulnerable software package among a plurality of software packages based on cybersecurity data indicating a vulnerability;

identify at least one vulnerable software image of a plurality of software images by determining that the at least one vulnerable software image contains the vulnerable software package based on a plurality of files, wherein each of the plurality of software images is built based on a corresponding file of the plurality of files, wherein each file of the plurality of files includes a set of instructions for combining a subset of the plurality of software packages in order to build the corresponding software image of the plurality of software images; and

perform at least one remediation action with respect to the at least one vulnerable software image.

12 . The system of claim 11 , wherein performing the at least one remediation action includes modifying a deployment of at least a portion of the at least one vulnerable software image.

13 . The system of claim 12 , wherein performing the at least one remediation action includes pulling a deployment of at least a portion of the at least one vulnerable software image.

14 . The system of claim 12 , wherein performing the at least one remediation action includes redeploying at least a portion of the at least one vulnerable software image.

15 . The system of claim 12 , wherein performing the at least one remediation action includes rebuilding at least a portion of the at least one vulnerable software image based on the plurality of files.

16 . The system of claim 12 , wherein the at least one vulnerable software image is a plurality of vulnerable software images, wherein the system is further configured to:

determine a subset of the plurality of vulnerable software images to be remediated based on a vulnerability status of each of the plurality of vulnerable software images, wherein the deployment of the determined subset of the plurality of vulnerable software images is modified.

17 . The system of claim 16 , wherein the vulnerability status of each of the plurality of vulnerable software images indicates whether the vulnerable software image contains a vulnerability that is actively being exploited, wherein the determined subset of the plurality of vulnerable software images is at least one vulnerable software image of the plurality of software images which contains a vulnerability that is actively being exploited.

18 . The system of claim 11 , wherein the system is further configured to:

generate the plurality of software packages, wherein each software package of the plurality of software packages is generated using a respective set of code; and

build the plurality of software images based on the plurality of files.

19 . The system of claim 11 , wherein each software package is a unit of code defined with respect to at least one function.