security1 distinct publisher
The disclosure pipeline is triaging itself: 20,700 new CVEs, 10% more exploitation
NIST stopped enriching every CVE, HackerOne paused the Internet Bug Bounty, Pwn2Own turned entrants away, and Cisco began bundling flaws under one ID. Attackers barely changed method.
Publishers:beazley.security
Reality
- Evidence38
- Adoption55
- Hype gap+14
- Incentives72
- Confidence44