When a Public Exploit Lands in Two Days, Severity Ratings Aren't Enough
·963 words·5 mins
A threat-hunting report puts the gap between a public proof-of-concept and active exploitation at about 48 hours. Here is what that does to patch scheduling, why severity scores are the wrong primary signal, and a few adjustments worth making.