Threat intel, DFIR
and security notes
Deep-dives, investigation write-ups, tooling notes and transparent product updates from the mlab team. Written for analysts who want the indicators, the method and the fix.
Articles
74
Categories
9
Tags
198
Latest
October 20, 2026
#cvss
Newest first
Vulnerability Management
CVSS 4.0 Explained: Reading a Vector String Step by Step
CVSS 4.0 renamed, split and added metrics, dropped Scope, and introduced labels like CVSS-BT so you know which score you are looking at. A metric by metric walkthrough of a 4.0 vector, and what changed from 3.1.
8 min
Vulnerability Management
CVSS, EPSS, KEV: How to Actually Prioritize Vulnerabilities
Patching by CVSS score alone drowns your team in criticals that will never be exploited. Here is how to combine CVSS, EPSS, and CISA KEV into a priority queue that works.
7 min
Engineering
inkdex: an index that states facts, a scanner that judges them
Studies, benchmarks and build notes. Method first, numbers included, losses too.
Read the latest note