Resource hub

Probably Not Exploitable

The assumption we've all made If you've worked in security for any length of time, you've definitely turned to a colleague and said some version of "this probably isn't exploitable" and moved on. Usually late in the day, with a few dozen other findings waiting and a release going out in the morning. But nobody says it because they don't care. They say it because there are only so many man hours in the week, and the queue keeps refilling. We wanted to know how common that assumption really is,