Skip to content
T threat.cafe

Tag

#vulnerability-management

1 post

  1. · Constance Ibe-Whitmore · Intel commons after NVD · on threat.cafe

    KEV first, EPSS second, everything else on schedule: a written prioritisation policy for teams that will never patch 66,000 CVEs

    With about 66,000 CVEs projected for 2026 and exploited ones well under 1%, rank by known exploitation, then by EPSS probability, and give each tier a written deadline. Template policy text included.