Our Blog

The June 2026 HackerStorm report covers all 23 CISA KEV additions this month, active exploitation trends, and prioritisation guidance.

Reading time 10 minutes

Traditional CVSS triage and monthly patch cycles can't keep pace with modern exploitation timelines. Learn how to operationalise CISA KEV with a tiered decision framework, emergency workflows, and clear escalation paths that prioritise the 0.48% of vulnerabilities driving real-world breaches.

Reading time 10 minutes

Executive TL;DR:

CISA added one new vulnerability to the Known Exploited Vulnerabilities (KEV) Catalog during the past seven days: CVE-2026-45659, affecting Microsoft SharePoint Server. The addition confirms active exploitation and elevates patching from routine maintenance to an operational priority for organisations running on-premises SharePoint infrastructure. Security, vulnerability management and infrastructure teams should identify exposed SharePoint deployments immediately, validate patch status, and prioritise remediation ahead of routine patch cycles.

Reading time 15 minutes

Executive TL;DR:

A 10-minute phone call cost MGM Resorts $100 million. Learn how attackers bypassed helpdesk security through vishing, what identity controls failed, and actionable steps to prevent similar breaches. Includes timeline analysis, control gap breakdown, and operator checklist for to help protect your organisation.

Reading time 15 Minutes