Field notes
One useful thing a day about what is exposed and what to fix first.
Exploited this week, the control explained, one computed number, the misread, and the method. Every figure is read at source or computed from the public data, and the source is under each note.
Three inputs to prioritisation are public. One is yours.
61% of all CVEs score under 1% on EPSS. It is a probability, not a severity.
Control 2402: monthly is fixed, the timeline is yours.
Three days. CISA set that deadline 102 times this year.
56% of known-exploited CVEs were already old when they were added.
DCC Level 0 is three controls. Level 1 is 101.