More focus - less panic Many security teams "waste" valuable time fixing vulnerabilities that don't pose a real threat in practice.