Most vulnerabilities first blabbed about online or on the dark web

Official bug notice? Sure, but not before I get cred and LOLs

More than three-quarters of vulnerabilities are publicly reported online before National Vulnerability Database publication."