🎯 Reachability-based prioritization

The items that name it 2

• Executive Order 14028 SBOM Requirements: What to Comply With and How | Endor Labs
  article2026-10-12It is written here as Reachability-based prioritization: fix findings whose vulnerable functions can be reached and exploited first.
• Hallucinated Packages: How AI Invents Dependencies Attackers Exploit | Blog | Endor Labs
  article2026-09-02

  Building a call graph across an application and using full stack reachability analysis to determine which vulnerability/malware findings can actually be exploited, since about 95% of vulnerabilities live in transitive dependencies