VulnCheck

Data from globally deployed Internet sensors revealing the first signs of vulnerability exploitation.

Leverage Exploit & Vulnerability Intelligence to make better decisions on which vulnerabilities need immediate remediation.

In-house developed exploit PoCs, packet captures, and Suricata signatures to defend against initial access vulnerabilities.

The company offers products.

All the latest VulnCheck news, straight from the team

Search through vulnerability, exploit, and security content including but not limited to: Research Reports, Whitepapers, Webinars, and more

The page archives recent announcements from VulnCheck.

The company has a leadership team and investors.

The company publishes a blog and press releases.

The company offers data to power cybersecurity products.

Vulnerability intelligence that predicts avenues of attack with speed and accuracy.

VulnCheck, Inc. Privacy Policy

Terms and Conditions of use for VulnCheck.com

Amazon reports attackers exploited critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) **four days before patches were released**, with exploit attempts reaching millions. Cloudflare detected thousands of probes before disclosure, escalating to hundreds of thousands within hours. While no confirmed breaches have occurred, Wordfence blocked over 74,000 attempts across 5 million WordPress sites. Organizations globally, including Nomura, Mitsubishi UFJ, and government agencies, suspended services as a precaution. Experts warn outdated PHP systems—over 1 million hosts lack updates—pose persistent risks, as dependencies may complicate patching efforts.

Oct 2026SiliconANGLENews article

GitHubRepository owner

Reach Security raises over **$50 million** in Series B funding led by Top Tier Capital Partners to expand its AI-driven cybersecurity platform, **Reach Everywhere**. The company’s technology automates security control adjustments in real time, helping enterprises prioritize only actionable vulnerabilities while integrating with existing tools like ServiceNow and Jira. Customers, including Autodesk and Insurity, report **160+ hours saved weekly** and a **156% ROI** from streamlined exposure management. Reach’s deterministic AI validates controls continuously, addressing AI-fueled attack speeds—where adversaries now operate in as little as **27 seconds**—by ensuring defenses adapt without manual intervention.

Oct 2026FinTech GlobalNews article

VulnCheck tracks 884 Known Exploited Vulnerabilities (KEVs) in 2025, where attackers exploited flaws on or before their public disclosure 28.96% of the time. This marks a rise from 23.6% in 2024, highlighting faster exploitation following vulnerability announcements. The report uses CVE publication dates to measure how quickly defenders must respond to emerging threats.

Jan 2026VulnCheckNews article