Only 0.5% of 383,000 CVEs are ever exploited in real-world attacks (microsoft.com)

Title: What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

You've taken a link (the article does not make your title claim) and phrased it as a fact.

> Yet only about 2,000 CVEs (roughly 0.5%) have been linked to real-world exploitation

That we know of

The other 99.5% are exploited on someone’s resume

"Only 0.5% of doorways are used to leave with bank money"

Look, I only need one doorway, I'm not coming back to prove all your doorways are usable. If you cover the obvious ones I'm going to use the less obvious ones.

What a silly article.

But man will people harp on an io-uring or KSMBd cve for years, decades. Even if no one suffers any consequences, the sense of wrongness, the zeal flew feel when we can point the finger: it's overpoweringly strong!

https://news.ycombinator.com/item?id=50329288