---
id: 2391
title: "The DBIR’s ‘Forest’ of Exploit Signatures"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/"
published_at: "2016-05-05T20:56:12Z"
tags: ["vulnerability-management", "threat-intelligence", "tls", "methodology", "dbir", "verizon", "reporting", "data-breach", "risk-assessment", "criticism", "freak", "patch-prioritization", "report-analysis", "threat-report"]
phying_url: "https://phying.com/item/2391"
lang: en
---

# The DBIR’s ‘Forest’ of Exploit Signatures

## Summary

Dan Guido argues the 2016 Verizon DBIR's vulnerability section, built on Kenna Security scanner data rather than real breaches, misleads defenders by ranking TLS FREAK among the most exploited bugs.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2016-05-05T20:56:12Z
- **Original:** https://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/
- **Phying News:** https://phying.com/item/2391