Our Blog
Hackerstorm has made free, machine-readable enriched data based on the latest CISA KEV Catalog available through public JSON and RSS feeds. Designed to help you stay up to date, these feeds enable you to see today’s KEV updates and apply the five signals for risk-based prioritization and remediation.
Reading time 10 minutes
The September 2026 Hackerstorm Vulnerability Priority Report analyzes 43 critical CISA KEV additions, highlighting aggressive threat actor targeting of network management planes, core operating system kernels, and enterprise edge gateways. Discover essential EPSS scores, sector risk exposures, and strategic remediation priorities to protect your infrastructure.
Reading time 10 minutes
H1 2026 ransomware-linked vulnerabilities reveal a recurring concentration around remote access, network-edge and privileged management infrastructure. Analysis of 20 vulnerabilities shows high levels of exploitation probability, significant business impact and recurring weaknesses involving authentication, deserialization, path traversal and code execution. Six of the 20, nearly a third were actively exploited before a patch or advisory existed at all.
Reading time 10 minutes
Modern attackers increasingly bypass MFA by stealing session tokens after authentication completes. With median dwell time at 22 seconds for identity-based attacks (Mandiant M-Trends 2025), SOC teams monitoring only authentication gates miss post-authentication compromise entirely. Identity-based initial access represents 65% of breaches (Mandiant) and a material factor in 90% of investigations (Unit 42), yet most organisations treat identity logs as compliance artifacts rather than operational threat intelligence.
Reading time 10 minutes