Black Hat Europe 2024: Why a CVSS score of 7.5 may be a 'perfect' 10 in your organization

This article summarizes a Black Hat Europe 2024 talk arguing that aggregate CVSS scores can obscure real-world risk—e.g., a 7.5 may warrant urgent patching if a single CIA dimension is maximized or if organizational context elevates impact—and highlights how exploit dependencies, asset visibility, and environmental factors should guide prioritization; it also notes the challenges for smaller teams and suggests automation and potential support from cyber-insurers to improve vulnerability triage.