Blog

Faster vulnerability discovery will not reduce risk unless organizations can prioritize, assign, remediate, and prove what actually gets fixed.

On June 15, 2026, EPSS v5 goes live. For the Exploit Prediction Scoring System, it's an important update in its history: a 23% improvement in the model's ability to correctly surface the vulnerabilities that are actually likely to be exp.

Objective 200 connectors: our next goal to bring value to our clients. Today, we reach the milestone of over 130 connectors. And this is just a step: our roadmap is taking us quickly toward 200 native integrations. This acceleration is no coincidence. It reflects a founding conviction at Hackuity: vulnerability management only makes sense if it integrates into the real ecosystem of security teams, without forcing them to change their tools, workflows, or habits.

For two decades, cybersecurity teams have relied on a familiar arsenal: SAST scanners, DAST scanners, infrastructure scanners, CNAPPs, EDR telemetry, and endless streams of CVEs. Detection logic evolved. Coverage expanded. Dashboards multiplied. But the operating model itself barely changed. Then came generative AI. And suddenly, the question is no longer whether AI can assist security scanners. The question is whether AI models like Anthropic’s Claude are becoming scanners themselves.

"An unprivileged local user can write 4 controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root." - Source: Xint Security Research copy.fail A nine-year-old optimization in the Linux kernel turned into a universal privilege escalation path. Public PoCs dropped immediately, major cloud providers are scrambling to patch, and CISA added it to the Known Exploited Vulnerabilities catalog on May 1st. If you run Linux anywhere (and you do), this is a "patch first, analyze later" situation.

The relationship between vulnerability disclosure and exploitation is fundamentally changing. Where security teams once had weeks to assess and respond to most newly reported CVEs, attackers are now moving in a matter of days. Research has found that the exploitation of high and critical vulnerabilities rose 105% year-on-year in 2025, with the median time from disclosure to active exploitation falling to just five days.