PHP is in the foundation of 70% of websites – here's what it is and why a flaw in the software is a major hacking threat

A newly disclosed vulnerability is only a real risk to your organization once it's confirmed present and exploitable in your own environment, not every CVE applies equally to every network. Knowing the difference is exactly what a proper vulnerability assessment is for.