Our Blog

Security teams face one new CVE every 7.4 minutes, yet only a fraction of vendor security advisories describe vulnerabilities with meaningful exploitation likelihood or exposure. This analysis maps the evidence separating genuine operational risk from advisory noise, for SOC teams, vulnerability management programmes, and security leadership responsible for prioritisation decisions.

Reading time 10 minutes

July 2026 saw 26 new entries added to CISA's Known Exploited Vulnerabilities (KEV) catalog, dominated by targeting of enterprise collaboration platforms, edge network infrastructure, and web content management systems. Threat actors demonstrated a concentrated focus on management planes (Arista VCO, Cisco FMC) and enterprise application backbones (Microsoft SharePoint, Oracle EBS), utilizing deserialization, hardcoded authentication bypasses, and OS command injection to bypass traditional perimeter security controls. Security operations, vulnerability management leads, and infrastructure administrators must use this intelligence-led priority assessment to cut through raw CVSS noise and execute targeted remediation across high-exposure assets.

Reading time 10 minutes

CVSS assigns severity scores to vulnerabilities based on theoretical impact. EPSS predicts which vulnerabilities adversaries will actually exploit within 30 days. Security teams managing 41,000+ annual CVEs with 56% scored High or Critical face a prioritization crisis where traditional scoring fails operational reality.

Reading time 10 minutes

The June 2026 HackerStorm report covers all 23 CISA KEV additions this month, active exploitation trends, and prioritisation guidance.

Reading time 10 minutes