// Hacker Noon · 2 February 2026

Security Doesn’t Start With CVE Disclosure

Security doesn’t begin when a CVE is published. In the Tomcat CVE-2025-24813 case, the fix shipped quietly weeks before disclosure, meaning teams that routinely applied maintenance updates were already safe—while others were exposed despite fast reactions later. CVE scores, scanners, and compliance...

Hacker Noon

@hacker-noon · Steve Poole

hackernoon.com

Hacker Noon@hacker-noon