lgkm.org field notes: Exposure and threat The state of modern IT and security https://lgkm.org/topics/exposure/ 2026-10-19T00:00:00Z Simon Bennett Vulnerability counts are the wrong number https://lgkm.org/notes/vulnerability-counts-wrong-number/ 2026-10-19T00:00:00Z A falling count of open vulnerabilities feels like progress and says little about risk. What matters is which weaknesses an attacker can reach and use, on the things the business depends on, and how fast those get closed.