Nearly half of big firms shelve or close vulnerability findings they haven't confirmed - Help Net Security
Nearly half of security teams at organizations with 5,000 or more employees close or deprioritize vulnerability findings without fully verifying them, ProjectDiscovery found, and the reason they give is time.
Here’s the catch. Among teams that skip full verification, 57% say at least three out of four findings they do check turn out to be real. If most of what you look at is genuine, there’s not much reason to think the stuff you didn’t look at is noise. And that stuff isn’t sitting still. Mandiant says attackers took an average of 7 days to exploit a vulnerability in 2025. In 2018, it was 63.
Linha do tempo
-
Nearly half of big firms shelve or close vulnerability findings they haven't confirmed - Help Net Security
ler a análise desta fonte ocultar
Nearly half of security teams at organizations with 5,000 or more employees close or deprioritize vulnerability findings without fully verifying them, ProjectDiscovery found, and the reason they give is time.
Here’s the catch. Among teams that skip full verification, 57% say at least three out of four findings they do check turn out to be real. If most of what you look at is genuine, there’s not much reason to think the stuff you didn’t look at is noise. And that stuff isn’t sitting still. Mandiant says attackers took an average of 7 days to exploit a vulnerability in 2025. In 2018, it was 63.