#cvss

Security

Threats, vulnerabilities and risk explained: how to decide which security findings matter

Nadia Haddad · Jun 11, 2026 · 6 min read

Part 3 of the security fundamentals series. Threat, vulnerability, exploit, impact and risk defined with one running example, why a CVSS score is not your risk, and a small risk register you can start this week.

Security

Vulnerability management that keeps up: discover, prioritise with EPSS and KEV, fix, verify

Samuel Osei · May 7, 2026 · 7 min read

Scanners produce thousands of findings and teams drown. A vulnerability management lifecycle that works for a small security function: asset discovery, scanning, prioritisation with CVSS, EPSS and the KEV catalog, remediation SLAs and verification.