Fake CVEs and What They Tell You About Your Security Process

The Problem With Panic-Driven Security Last month, a CVE identifier for a supposedly critical PHP vulnerability made the rounds on Twitter and security forums. Teams scrambled. Slack channels lit up.