Start here

Start here — a guided path

Six short stops that take you from “what is a CVE?” to reading actors and defenses like the rest of the site does. Each stop is a page that already exists — follow them in order, or jump to whichever gap you have.

1. 1

   The mental model

   Start with how we read the security surface: threats, exposures, assets and controls — four dimensions, refreshed in real time.

   Reading the surface in four dimensions

2. 2

   The vocabulary

   Learn the words before the data: CVE, CVSS, EPSS, KEV, ATT&CK techniques, actor vs campaign vs incident — one plain definition each.

   Concepts — the glossary

3. 3

   Today’s picture

   See what changed that matters today: new KEV entries, the biggest EPSS movers, and fresh criticals. The daily brief packages it as a short read.

   Today’s signal · The daily brief

4. 4

   Follow one vulnerability

   Understand the single 0–100 Risk Priority number — what it combines and why it uses peak EPSS — then open any CVE on the tracker and read it end to end.

   How we score CVE risk · Pick any CVE on the tracker

5. 5

   Know the adversary

   Meet the tracked actors and campaigns, and read how we attribute them — the naming, the confidence grading, and where the machines get it wrong.

   Threat actors · How we know (methodology)

6. 6

   Connect to defenses

   Close the loop from weakness to control. The framework cross-walks show how the chips on this site connect CVEs, weaknesses and controls — with an honest caveat on their limits.

   Controls · Reading cross-walks · The cross-walk illusion (caveat)

More primers & explainers

• 04 July 2026Concepts — a plain-language glossary
• 04 June 2026Reading the security surface in four dimensions
• 20 May 2026What is Distributed Denial of Service (DDoS)?
• 12 May 2026What is Remote Code Execution (RCE)?
• 12 May 2026What is Local Privilege Escalation (LPE)?