Root Evidence says only 600 CVEs drive losses

In an interview with Jeremiah Grossman, CEO of Root Evidence, the discussion focuses on vulnerability management data showing that only about 1.48% of published CVEs have confirmed exploitation in the wild. Grossman argues that the industry's focus on consensus rather than efficacy has misaligned incentives, noting that cyber insurance claims data links financial losses to only about 600 CVEs. Open article →