Article
Blog
Insights, research, and practical guidance to help security teams prioritize risk, accelerate remediation, and stay ahead of modern threats.
Most recent

Article
Expert View
5 minutes
read
PHP2Shell: The Patch Was Scheduled. The PoC Came First.
Two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, were patched on October 21. Thirteen and a half hours earlier, an independent researcher had already published a reconstruction of them, apparently built from a handful of public clues.
October 21, 2026
Library
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Expert View
5 min
read
React2Shell (CVE‑2025‑55182): critical vulnerability in React Server Components
“There is an unauthenticated remote code execution vulnerability in React Server Components. We recommend upgrading immediately.” - Source: React blog post. A critical flaw in React Server Components (RSC) turned into a live-fire event within hours. Public PoCs appeared, cloud providers reported probing at scale, and frameworks rushed patches. If you run React 19 or frameworks that implement RSC (notably Next.js App Router), this is a “upgrade first, investigate next” moment.
August 25, 2026

Article
Case Study
10 min
read
Nearly Half of Security Teams Struggling to Cope with Growing Volume of Vulnerabilities
Hackuity, the risk-based vulnerability management provider, today released new research revealing the mounting pressure on security teams as they struggle to keep pace with the rising number of CVEs (Common Vulnerabilities and Exposures).
August 25, 2026

Article
Expert View
10 min
read
Navigating the Cisco Vulnerability Management End of Life: A Strategic Inflection Point for Security Programs
On December 9, 2025, Cisco issued an official end-of-life announcement that changes the landscape for many security teams: Cisco Vulnerability Management, Vulnerability Intelligence, and Application Security Module (formerly Kenna) will reach end-of-support on June 30, 2028. The announcement includes a critical detail that elevates this from a routine technology refresh to a strategic decision point: Cisco has explicitly stated there is no replacement available for these products at this time. This is not a migration to a next-generation Cisco platform. It is a complete exit from this market segment, requiring customers to reassess their vulnerability management approach.The timeline provides approximately 42 months from announcement to final support cutoff. Sales end March 10, 2026. Service renewals stop June 11, 2026. After mid-2028, organizations still running Cisco Vulnerability Management will operate without vendor support, security updates, or technical assistance. 💡Here is the good news: if your organization has been running Kenna successfully, you already have something more valuable than any platform—you have the operational foundation in place to transition smoothly and evolve further.
August 25, 2026

Article
Hackuity in the News
4 min
read
More code, more flaws: scaling vulnerability management for the AI era
Software is being built at record speed, but security is falling behind. In fact, recent research found that 81% of organisations knowingly shipped vulnerable code last year to meet the pressure for shorter production lifecycles.
August 25, 2026












