EVERYTHING TO KNOW ABOUT RUNTIME REACHABILITY

Summary from the TLDR InfoSec newsletter

Runtime reachability enables security teams to prioritize vulnerabilities that require immediate attention. It includes network reachability, package-loaded reachability, and function execution reachability. Package-loaded reachability may prioritize false positives, while network reachability might de-prioritize vulnerabilities in non-internet-accessible systems. Function execution reachability is the most robust but requires a (C)ADR.