Am I the only one who thinks we need to either change the way vulns are scored or just have a much larger range say CVSS 1-100 so we can tamp down on the overhyping of Vulns?
It is obvious to me that even if we had real risk scores vulns would be used for FUD.
XFEDI
ActivityPubRemote profile
Shecky - Third Wheel
Dad, Security Engineer, Burbsec North Organizer, KQL nerd, BlueTeam, N9HAK, Padawan, Theatre Actor/Tech Man, Train Hobbyist, "Dammit Shecky" Opinions and more, GCIH, CISSP
Open remote profile ↗Posts
I love the fact that headlines on the PHP shitshow said it was being exploited in the wild, yet the researchers I know and trust have said that it is a difficult at best to exploit and that no known instances oi it actually being exploited have been proven. Shows the state of reporting FUD. IMHO.
OMGWTFBBQ!!!