CVE Tools
Track your stack

200 new CVEs a day and no realistic way to patch them all

Help Net SecurityBy Mirko Zorz

Research

Our summary

Ryan Dewhurst, CEO of KEVIntel, outlines how his team detects exploited vulnerabilities that have not yet been included in CISA’s catalog. Using a global honeypot network, AI triage, and manual verification, the company has identified over a thousand known exploited vulnerabilities (KEVs) not present in official records. The research highlights challenges faced by organizations in managing the growing volume of daily CVEs—now averaging 200 per day—and emphasizes the importance of prioritizing high-risk exploits. Dewhurst also warns about misleading AI-generated proof-of-concept code and the limitations of relying solely on CISA’s guidance for private-sector security decisions.

Read at Help Net Security

Help Net Security publishes this story on its own site; we link to it rather than reprint it.

  1. BleepingComputerCISA urges immediate action on actively exploited Fortinet flawsCVE-2026-25089, CVE-2026-39808 +1
  2. Check Point Research22nd June – Threat Intelligence ReportCVE-2026-25089, CVE-2026-39808 +1
  3. SecurityWeek3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker CrosshairsCVE-2026-25089, CVE-2026-39808 +1
  4. The Hacker NewsAttackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last WeekCVE-2026-25089, CVE-2026-39808 +1
  5. BleepingComputerCritical Fortinet FortiSandbox flaws now exploited in attacksCVE-2026-25089, CVE-2026-39808 +1
  6. BleepingComputerNew InfraTrust report reveals infrastructure flaws admins should patch firstCVE-2026-25089, CVE-2026-39808
  7. SecurityWeekFresh SharePoint Vulnerability Exploited Soon After DisclosureCVE-2026-25089, CVE-2026-39808
  8. The Hacker NewsCISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEVCVE-2026-25089, CVE-2026-39808
  9. BleepingComputerChinese hackers exploit WordPress, Zyxel flaws to steal govt dataCVE-2026-60137
  10. Help Net SecurityAttacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)CVE-2026-60137

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store