Black Hat 2022: The CVSS Fallacy - can you trust the world’s most popular vulnerability metric?