Knowing which exploits are currently being used, and knowing which platforms and applications are currently being targeted provides an organization with insight into where it should focus protection. If an attacker is successfully using exploits against an application that the organization does not have deployed, then there is no risk. If the exploit is targeting an application that the organization has deployed, there is considerable risk.