Counting vulnerabilities tells you almost nothing about risk | Steelwise

We analysed 248,176 vulnerability records and would not publish a most-vulnerable list. Nine of the ten most-affected products were the same kernel flaws counted again per distribution. Not even accurate counts. Read the filing #vulnerabilitymanagement #infrastructure #riskmanagement #infosec Linux kernel: 8,053 vulnerabilities, under 1% exploited. FortiOS: 113, nearly 20% exploited. Why counting