The Vulnerability Identity Crisis(research.empiricalsecurity.com)

https://research.empiricalsecurity.com/research/the-vulnerability-identity-crisis