Key Points A new vulnerability hits the headlines, and the first question every security team asks is: are we affected? Answering this has traditionally meant waiting for a vendor to publish a detection check, and then hoping that check actually confirms the weakness rather than just flagging a vulnerable version which may not be exploitable. That delay is a problem, because the gap between a vuln...