Solid guide . One question how do you decide what’s actually exploitable vs just high severity on paper?
Vulnerability Check & Triage Walkthrough
2 Comments
Amara Graham
•
@[Andrey Turkin] CISA does that for me with their KEV (Known Exploited Vulnerabilities) Catalog. These are known to have already been exploited in the wild. I realized after I was using this as a datasource that the AI would probably always evaluate these as a high priority and requiring immediate mitigation. Oh well.
You can also find lists that are "just" CVEs and look really severe, but can't be exploited due to a variety of things. This is where I would leverage the AI tools companies are giving access to their source code and work collaboratively to determine if it's exploitable in that particularly setup/configuration/environment/etc.
Please log in to add a comment.
🔥 Join developers growing publicly
Share your knowledge, build in public, and grow your developer presence with a global community.
Please log in to comment on this post.
More Posts
- © 2026 Coder Legion
- Feedback / Bug
- Privacy
- About Us
- Contacts
- You Tube
- Tiktok
- Premium Subscription
- Terms of Service
- Early Builders
chevron_left
More From Amara Graham
Related Jobs
- Spanish Bilingual Appointment Setter Work From HomeInsurance Protection Specialists · Full time · Puerto Rico
- Bilingual Retail Sales Associate (Spanish) - VerizonVerizon · Full time · Germany
- Triage Order Quality Associate IIAbbott · Full time · Springfield, IL
Commenters (This Week)
Steve Fentonverified
9 comments
Md Mijanur Molla
1 comment
the_tisa
1 comment
Contribute meaningful comments to climb the leaderboard and earn badges!