Insights

Security thinking for
systems, AI, and leadership.

Field notes from RedBlue Cyber on threat modeling, AI security readiness, vulnerability management, and business-aligned security leadership.

Stop Treating Low Severity CVEs as Noise. Start Treating Them as Ingredients.

Published June 7, 2026

New piece from our co-founder Sam on why low severity CVEs deserve a second look, and how to re-score them by what they actually give an attacker.