200 new CVEs a day and no realistic way to patch them all
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-25089 | Unauthenticated OS Command Injection RCE in Fortinet FortiSandbox | 9.8 | 76% | KEV | KEV |
From the original article
6 min read at helpnetsecurity.com
Ryan Dewhurst, CEO at KEVIntel , explains how his team confirms exploitation that CISA’s catalog has not listed yet. He describes a global honeypot sensor network, AI triage, and human verification in a lab before a vulnerability reaches the public feed. He covers CISA’s three-day patching deadline under BOD 26-04, why virtual patching buys time, and how AI-generated proof-of-concept code muddies the evidence.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.