Brian "Jericho" Martin

In this discussion, Brian 'Jericho' Martin, a seasoned expert in vulnerability intelligence and founder of attrition.org, dives into the complexities of vulnerability scoring and patching. He passionately debates the shortcomings of CVSS and critiques the CVE process, highlighting why many vulnerabilities remain unnumbered. Brian proposes a new prioritization model for addressing threats and stresses the need for better vendor responsiveness. With a nod to the messy realities of existing systems, he contemplates whether meaningful industry improvements are possible.