Blog

On April 15, 2026, NIST announced they can no longer keep up with the flood of CVE submissions hitting the National Vulnerability Database. The numbers tell the story: CVE submissions jumped 263% between 2020 and 2025, and even after enriching a record 42,000 CVEs last year, the backlog keeps growing. So they're changing how NVD works. And if your vulnerability management workflow depends on NVD enrichment, you need to understand what's shifting.

Our friends at DefectDojo recently published a comparison piece positioning their platform against Hackuity. The article is here: DefectDojo Pro vs Hackuity in 2026: The Risk Cockpit vs. The Security OSFirst, credit where it’s due: writing comparison content is hard. It takes time, effort, and a willingness to step into uncomfortable territory. We genuinely appreciate it, if only because this kind of content tends to appear when something in the market is shifting. Rapid customer replacement, international expansion, and increased visibility tend to… trigger reactions. And that’s fine. Disruption usually does. Because that’s the real point: Hackuity isn’t just another “vulnerability management tool.” The goal has always been to move beyond fragmented, inefficient processes and into something operationally coherent, what we call VulnOps. Now, let’s address a few highlights from the article.

On April 7, 2026, Anthropic launched Project Glasswing. The announcement sent shockwaves through the cybersecurity industry, not because of what it promised, but because of what it revealed. Claude Mythos Preview, an AI model with 10 trillion parameters, had autonomously discovered thousands of zero-day vulnerabilities across every major operating system and web browser. Some had existed for 27 years. Others had survived 5 million automated scans. As one industry analysis put it: "The vulnerability pipeline just got a firehose attached to it."

You’ve obviously seen this announcement everywhere already, but Anthropic’s latest reveal is still worth a closer look. The company has introduced Claude Mythos Preview, a new AI model described as its most powerful to date, capable of autonomously discovering and exploiting software vulnerabilities at a level comparable to, or even exceeding, top human security researchers. The company deemed this model too dangerous for public release. Instead, they're deploying it through a controlled initiative that could reshape how we think about software security.

ISJ hears exclusively from Sylvian Cortes, VP of Strategy, Hackuity about about what the EU CRA means for manufacturers and why it represents a major shift in software liability.

The volume of security vulnerabilities continues to soar, leaving overwhelmed security teams struggling to separate genuine threats from background noise.Hackuity’s latest Vulnerability Management Report highlights how this rising pressur..