Our Blog
H1 2026 ransomware-linked vulnerabilities reveal a recurring concentration around remote access, network-edge and privileged management infrastructure. Analysis of 20 vulnerabilities shows high levels of exploitation probability, significant business impact and recurring weaknesses involving authentication, deserialization, path traversal and code execution. Six of the 20, nearly a third were actively exploited before a patch or advisory existed at all.
Reading time 10 minutes
Modern attackers increasingly bypass MFA by stealing session tokens after authentication completes. With median dwell time at 22 seconds for identity-based attacks (Mandiant M-Trends 2025), SOC teams monitoring only authentication gates miss post-authentication compromise entirely. Identity-based initial access represents 65% of breaches (Mandiant) and a material factor in 90% of investigations (Unit 42), yet most organisations treat identity logs as compliance artifacts rather than operational threat intelligence.
Reading time 10 minutes
The CISA Known Exploited Vulnerabilities (KEV) Catalog expanded significantly in August 2026, recording 31 new additions spanning edge appliances, enterprise software, and core operating systems. Active exploitation patterns throughout the month signal a sharp threat actor pivot toward identity infrastructure bypasses, authentication flaws, and remote code execution across ubiquitous enterprise IT dependencies. Security leaders, vulnerability managers, and SOC operations must use this intelligence report to bypass raw severity scores and immediately action operational remediation against confirmed threat activity.
Reading time 10 minutes
Security teams face one new CVE every 7.4 minutes, yet only a fraction of vendor security advisories describe vulnerabilities with meaningful exploitation likelihood or exposure. This analysis maps the evidence separating genuine operational risk from advisory noise, for SOC teams, vulnerability management programmes, and security leadership responsible for prioritisation decisions.
Reading time 10 minutes