Speaker: Dr Francesco Masala
22 October 2026 | 15:00–16:00 CEST | Online
Register here
A vulnerability gets a score of 9.8 out of 10. What do you do next?
Numbers have a powerful influence on how we make decisions. A vulnerability marked Critical can send us into immediate action, while something rated Low might wait for the next maintenance window.
But a score doesn’t necessarily tell us what matters most for your environment.
Today, vulnerabilities come with an increasing number of indicators: severity scores, exploitation probabilities, vendor assessments, vulnerability catalogues and information about vulnerabilities that are already being actively exploited. Each provides useful information. But how do you put them together to decide what actually needs attention first?
This is the focus of the next Small Habits. Big Impact webinar.
When 9.8 isn’t the whole story
In this webinar, Francesco Masala will explore how to interpret vulnerability indicators together, rather than simply following the loudest signal.
You will learn:
- what different vulnerability indicators actually tell you
- what they don’t tell you
- how severity scores, exploitation information and vendor assessments can complement each other
- how to use these indicators to make more informed vulnerability-management decisions
- how this approach works in practice in a research and academic environment.
Meet the speaker
Francesco Masala works in the Information Technologies department at Eurac Research and the Free University of Bozen-Bolzano (unibz), providing shared IT services across both institutions. His work covers vulnerability management, security monitoring and incident response across their research and academic infrastructure.Using Dirty Frag as a worked example, Francesco will share the approach his team uses to make sense of the many signals that accompany vulnerabilities – and turn them into practical decisions.
The webinar is part of GÉANT 2026 cybersecurity awareness campaign: Small Habits. Big Impact.
