https://research.empiricalsecurity.com/research daily 1.0 2026-09-21 https://research.empiricalsecurity.com/research/a-slightly-messy-kev-is-still-a-good-kev monthly 0.5 2026-09-21 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/ef75c1d1-162b-474c-9b53-2754f4f030a1/readdtimeline_ggplot.png Research Articles | Empirical Security - A Slightly Messy KEV is still a good KEV - Make it stand out Figure 1 — Most CVEs appear and disappear on their own, When we have a group we show them all together, the rest have their own timescale below. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/10ffc3ef-13c5-4794-aa45-29bcadd49a5c/change_counts.png Research Articles | Empirical Security - A Slightly Messy KEV is still a good KEV - Make it stand out Figure 2 — Most of these changes are minor, or come with new information about the CVE, for example, addition of CWEs, more elaborate descriptions, corrected vulnerability names, consistent product and vendor names. Interesting changes in Due Date are almost always asking federal agencies to fix things faster. https://research.empiricalsecurity.com/research/september-2026-cve-of-the-month monthly 0.5 2026-09-01 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/bbd08d97-4c54-4d94-8244-cd24e59628eb/Screenshot+2026-08-24+at+12.26.41%E2%80%AFPM.png Research Articles | Empirical Security - September 2026 CVE of the Month: The 9.8 Nobody Knows They Are Running (CVE-2026-58138) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/kinda-chic-to-prioritize-with-proof monthly 0.5 2026-08-12 https://research.empiricalsecurity.com/research/empirical-foundation-the-next-frontier-of-cyber-defense-modelling monthly 0.5 2026-08-11 https://research.empiricalsecurity.com/research/august-2026-cve-of-the-month monthly 0.5 2026-08-24 https://research.empiricalsecurity.com/research/july-2026-cve-of-the-month monthly 0.5 2026-07-27 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/2e7352b2-fe90-4f63-95ab-6366b809840e/history.png Research Articles | Empirical Security - July 2026 CVE of the Month: The Apache Solr Backdoor You Installed on Purpose (CVE-2026-44825) - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/teaming-up-against-exposure monthly 0.5 2026-07-21 https://research.empiricalsecurity.com/research/empirical-series-a monthly 0.5 2026-07-20 https://research.empiricalsecurity.com/research/country-roads-take-me-home monthly 0.5 2026-07-20 https://research.empiricalsecurity.com/research/looking-for-the-ai-vulnerability-flood monthly 0.5 2026-07-28 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/575a7cc1-0035-4f07-9d8b-866d2ee31749/Screenshot+2026-07-28+at+4.16.46%E2%80%AFPM.png Research Articles | Empirical Security - Looking for the AI vulnerability flood - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/77ed7d8b-10cf-4185-8808-24e7f157767f/image.png Research Articles | Empirical Security - Looking for the AI vulnerability flood - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/c99c6a42-e94f-4d01-80ee-ce085ce493ec/image+%281%29.png Research Articles | Empirical Security - Looking for the AI vulnerability flood - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/the-vulnerability-identity-crisis monthly 0.5 2026-06-30 https://research.empiricalsecurity.com/research/epss-v5-is-here monthly 0.5 2026-06-26 https://research.empiricalsecurity.com/research/accurate-representation monthly 0.5 2026-06-09 https://research.empiricalsecurity.com/research/oreilly monthly 0.5 2026-06-09 https://research.empiricalsecurity.com/research/dbir-confirms-the-new-bottleneck-in-security monthly 0.5 2026-05-19 https://research.empiricalsecurity.com/research/anthropic-is-right-about-epss-that-still-leaves-the-hard-part monthly 0.5 2026-04-15 https://research.empiricalsecurity.com/research/the-knowing-machine monthly 0.5 2026-04-15 https://research.empiricalsecurity.com/research/reality-check monthly 0.5 2026-04-13 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/bdbfce74-c0d2-446d-bfa4-d74f1598efc4/proportion-of-assets-with-open-vulns-among-500-firms.png Research Articles | Empirical Security - The 500 Organization Reality Check - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/2a4e3c97-608d-4c2c-ab5c-a0a4be6813e5/distribution-of-epss-scores-among-cves-observed-in-production-assets.png Research Articles | Empirical Security - The 500 Organization Reality Check - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/85e80607-9ba6-4429-bac3-9e8e3cbadfc2/proportion-of-assets-with-at-least-one-highly-exploitable-vuln.png Research Articles | Empirical Security - The 500 Organization Reality Check - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/ai-is-eating-your-scanner monthly 0.5 2026-03-19 https://research.empiricalsecurity.com/research/servicenow-vulnerability-response-app monthly 0.5 2026-03-05 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/959da43c-4d50-48f2-a712-9d06e5e06180/4-empirical-security-screenshot.jpg.jpg Research Articles | Empirical Security - Using ServiceNow? We’ve got you covered. - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/headcount-does-not-help monthly 0.5 2026-03-04 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/59167640-a3d3-4360-8818-4d93530fd7fd/exploitability-reduction-achieved-by-improving-remediation-strategy-and-capacity+%281%29.png Research Articles | Empirical Security - When Headcount Doesn’t Help - Make it stand out Figure 19 https://research.empiricalsecurity.com/research/capacity-is-king monthly 0.5 2026-02-07 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/fe16bc1a-efc0-46d9-aa99-aa1317d713a9/avg-monthly-observed-vs.-closed-vulnerabilities-per-firm.png Research Articles | Empirical Security - Capacity is King - Make it stand out The median enterprise has 15% remediation capacity. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/02907920-3d80-400a-bedd-41ab5468a912/distribution-of-remediation-capacity-among-organizations.png Research Articles | Empirical Security - Capacity is King - Make it stand out Variability is high, but skews left. https://research.empiricalsecurity.com/research/remediation-halflife monthly 0.5 2026-01-26 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/b1e260e3-bbd2-4798-9041-bfb82a7d4b52/survival-analysis-curves-for-vulnerability-remediation-timelines-fig-1.png Research Articles | Empirical Security - Remediation Half‑Life - Make it stand out It takes around 5 months to remediate half of an average organization’s vulnerabilities. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1d3099a7-7931-4bbb-8276-a04aa60543b3/survival-analysis-curves-for-vulnerability-remediation-timelines-fig-2.png Research Articles | Empirical Security - Remediation Half‑Life - Make it stand out Survival curve variability across 500 organizations https://research.empiricalsecurity.com/research/the-kev-paradox monthly 0.5 2026-01-14 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/ee365b74-24e6-4a33-9f0a-c6f0e7bbffd1/prevalence-of-kev-cves-in-organizations-by-various-measures.png Research Articles | Empirical Security - The KEV Paradox - Make it stand out 1% of open vulnerabilities out of a sample of 635 million are on the KEV list as of 2022. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/98da4d00-f764-459b-8418-cda914be87c4/overlap-between-vulnerabilities-with-exploit-code-and-exploitation-activity-and-appearance-on-the-kev.png Research Articles | Empirical Security - The KEV Paradox - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/b1c34945-f0a2-44d0-abd6-d68736799f06/cves-on-the-kev.png Research Articles | Empirical Security - The KEV Paradox - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/5c23dc97-debe-4b40-8474-db6a44deb1ad/all-published-cves.png Research Articles | Empirical Security - The KEV Paradox - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/trojan-rat monthly 0.5 2026-01-05 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/efea6b2b-d617-40d9-8ed3-50b699faf44d/github-exploitdb-metasploit.png Research Articles | Empirical Security - Trojan RAT: Stopping Exploit Spoofing with Machine Learning - Make it stand out Github’s rise as a source of exploit POCs in 2021 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/f72cd52d-6ce4-4df2-aaec-d8a4ed04fe3c/image+%281%29.png Research Articles | Empirical Security - Trojan RAT: Stopping Exploit Spoofing with Machine Learning - Make it stand out Scoring of 15 WebRAT exploit spoofing attacks by Empirical’s ML model https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/f6196706-11a4-42e2-9b30-4dab1de74fe9/image+%282%29.png Research Articles | Empirical Security - Trojan RAT: Stopping Exploit Spoofing with Machine Learning - Make it stand out Most CVE mentions on Github are not exploits https://research.empiricalsecurity.com/research/say-goodbye-to-kenna-say-hello-to-local-models-at-scale monthly 0.5 2025-12-18 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/bb2ba474-e76c-4ab2-99e2-3ab29ab727ac/Screenshot+2025-12-18+at+1.20.40%E2%80%AFPM.png Research Articles | Empirical Security - Say Goodbye to Kenna — Say Hello to Local Models at Scale - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/65c69d56-2bf8-49bc-a130-b34b08071aa8/IMG_1929.JPG Research Articles | Empirical Security - Say Goodbye to Kenna — Say Hello to Local Models at Scale - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/66854206-bb20-4c27-b1ff-2a232dc0f504/IMG_2685.JPG Research Articles | Empirical Security - Say Goodbye to Kenna — Say Hello to Local Models at Scale - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/45260f21-986d-4f55-9c94-e322aab47002/Screenshot+2025-12-18+at+1.38.32%E2%80%AFPM.png Research Articles | Empirical Security - Say Goodbye to Kenna — Say Hello to Local Models at Scale - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/critical-indicators-and-known-exploitation-heatmap monthly 0.5 2025-12-18 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/42510aef-2c23-45f2-9c50-9f7567bc2444/5-critical-indicators.png Research Articles | Empirical Security - New Features: Critical Indicators & Known Exploitation Calendar Heatmap - Make it stand out CVE Detail Page https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/cc74d52b-756d-4e68-9f78-743a88a43b64/key-2.png Research Articles | Empirical Security - New Features: Critical Indicators & Known Exploitation Calendar Heatmap - Make it stand out Critical Indicators Key https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/6cbc9945-4a6e-4a36-becb-d4108a09cc58/6-critical-indicators.png Research Articles | Empirical Security - New Features: Critical Indicators & Known Exploitation Calendar Heatmap - Make it stand out Critical Indicators API Example https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1b6ebfe4-46d3-4050-ae00-d68d0909ed32/8-critical-indicators.png Research Articles | Empirical Security - New Features: Critical Indicators & Known Exploitation Calendar Heatmap - Make it stand out CVE Detail Page https://research.empiricalsecurity.com/research/risk-model-slop monthly 0.5 2025-12-16 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/dea94c18-a318-4144-a0c7-79d81e0e7967/model-slop-image.png Research Articles | Empirical Security - Risk Model Slop - Make it stand out When adding data goes awry https://research.empiricalsecurity.com/research/local-models-vs-global-scores monthly 0.5 2025-10-08 https://research.empiricalsecurity.com/research/shadow-price-how-to monthly 0.5 2025-10-02 https://research.empiricalsecurity.com/research/shadow-pricing-business-case monthly 0.5 2025-09-02 https://research.empiricalsecurity.com/research/duality-of-risk-and-capacity monthly 0.5 2025-08-27 https://research.empiricalsecurity.com/research/auc-gtfo monthly 0.5 2025-08-25 https://research.empiricalsecurity.com/research/blackhat-recap-2025 monthly 0.5 2025-08-18 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305651920-7BOA6J91XO1P4MX1TI6Y/36405MR000001-R1-007-2.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305652594-ZDOHCUH62RHMG89GSPHS/36405MR000001-R1-005-1.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305657883-EEVS7THWRSDLY6QQ1IT8/36405MR000001-R1-009-3.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305658471-7Z7S38S2ZLZ2YFGL1E9Z/36405MR000001-R1-011-4.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305663911-R8XCH4S9AT29QT1LGJ53/36405MR000001-R1-015-6.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305666005-8O0TIZEEOIRXIR6TLQAJ/36405MR000001-R1-017-7.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305670240-1676JZHWXRDL1E1C3LT9/36405MR000001-R1-019-8.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305671781-9CHZIL63QKJ8T4UM3320/36405MR000001-R1-021-9.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305677157-44T6EIB6GT3PQ74P464Y/36405MR000001-R1-023-10.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305676528-2GWZO1US5V8H9G77ZN37/36405MR000001-R1-025-11.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305682408-0J0ZMIP2UVSGJBZRX3IZ/36405MR000001-R1-029-13.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305683415-F7VACC2CZY4FCIQHAKFJ/36405MR000001-R1-031-14.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305687282-L03VH6UNANSBS4ON2H7G/36405MR000001-R1-033-15.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305690450-ZQL9RZR6EC2IJT0MUKS3/36405MR000001-R1-039-18.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305693060-54KXBUUULQ37CZ0VI4PO/36405MR000001-R1-043-20.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305696732-BWB0HIZKEPCTOJPIK9BF/36405MR000001-R1-047-22.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305698295-F705POWSW6O4W1NDR3SY/36405MR000001-R1-049-23.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305703060-WCRQ9F44USLIMBYM9CF5/36405MR000001-R1-053-25.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305704828-CW9TLDQXGI09HBBRHB45/36405MR000001-R1-055-26.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305708247-IKY2RKSIQAHFSSV8EQFD/36405MR000001-R1-059-28.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305710705-UAFZ6HHFFB8V2ZL33FID/36405MR000001-R1-061-29.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305713802-CWCS4QVEI83K77Z8LDSZ/36405MR000001-R1-063-30.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305716878-GP4ENJJYSAXYTSXEQ2LM/36405MR000001-R1-065-31.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305720223-P4L36YT4GRROHJSCAMUF/36405MR000001-R1-069-33.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/1755305721286-5JVI68ALVE004Q0LP0RN/36405MR000001-R1-073-35.jpg Research Articles | Empirical Security - Blackhat Rat Pack Recap https://research.empiricalsecurity.com/research/github-exploits monthly 0.5 2025-08-18 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/593145d9-3d6b-4ade-b69c-2f87bef51867/roc_curve_with_labels.png Research Articles | Empirical Security - Finding New Exploits with A Bespoke Model - Make it stand out Comparison of performance between the previous classifier and the new and improved classifier. https://research.empiricalsecurity.com/research/its-not-about-making-a-scoring-system monthly 0.5 2025-08-18 https://research.empiricalsecurity.com/research/why-i-decided-to-join-empirical-security monthly 0.5 2025-07-17 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/c2e4a655-3563-498a-89b3-19a3b4661c13/leadership-team.png Research Articles | Empirical Security - Why I Decided to Join Empirical Security - Make it stand out Ed Bellis, Jay Jacobs, and Michael Roytman https://research.empiricalsecurity.com/research/benchmarking-llms monthly 0.5 2025-07-15 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/0fa22dbd-c8ff-4100-80d8-e8765b70b3d1/distributions.png Research Articles | Empirical Security - Benchmarking LLMs on the Vulnerability Prioritization Task - Make it stand out LLM generated probabilities skew upwards. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/232b46b7-a013-4048-8118-30ea2f415f2b/jaypt_cov_eff.png Research Articles | Empirical Security - Benchmarking LLMs on the Vulnerability Prioritization Task - Make it stand out LLMs lack the efficiency needed for the vulnerability prioritization task, the explanation is a tautology: prediction requires predictive modeling. Vulnerability prioritization is inherently a predictive task (“will an event occur?”). https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/b06f7d83-ce48-4857-8988-817ead336f50/jaypt_cov_effort.png Research Articles | Empirical Security - Benchmarking LLMs on the Vulnerability Prioritization Task - Make it stand out Limited coverage of LLMs on the vulnerability prioritization task. https://research.empiricalsecurity.com/research/re-exploited-series-2 monthly 0.5 2026-01-15 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/b7801319-0b1b-4e33-b025-3f2f72f1d9c0/recency_by_30days.png Research Articles | Empirical Security - Known Exploited vs Recently Exploited - Make it stand out Re-exploitation events follows a rather predictable pattern and they are neither independent nor random (in the big picture). https://research.empiricalsecurity.com/research/building-with-intention monthly 0.5 2025-07-08 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/036f7585-505a-4e00-9ee7-6dcc529e323b/team-1.png Research Articles | Empirical Security - Building with Intention: The Way We Work at Empirical - Make it stand out Spring 2025, The Hoxton in Chicago, IL https://research.empiricalsecurity.com/research/re-exploited-series-1 monthly 0.5 2026-01-15 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/dc5de089-4be5-4c73-8316-ef00623b91f5/re-exploitation_given_any_prior_activity.png Research Articles | Empirical Security - Known (Re-)Exploited Vulnerabilities - Make it stand out The chance of exploitation in the next 1, 7, or 30 days changes and fluctuates over time for CVEs with known exploitation (using a sliding 12-month window). https://research.empiricalsecurity.com/research/watch-empirical-at-vulncon-2025 monthly 0.5 2025-09-23 https://research.empiricalsecurity.com/research/only-your-data-can-truly-anticipate-threats monthly 0.5 2025-07-02 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/69af01ff-3280-4a0d-9b42-d23f9890a308/img.jpg Research Articles | Empirical Security - Only Your Data Can Truly Anticipate Threats - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/explore-thresholds-feature monthly 0.5 2025-08-25 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/2ff7f419-1db4-4a81-9606-20cda54862db/thresholds-r2.png Research Articles | Empirical Security - Explore Model Thresholds - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/explore-our-new-api-docs monthly 0.5 2025-05-28 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/9a2f1687-48ce-44c2-9e1c-483afdf15054/Screenshot+2025-05-28+at+12.11.20%E2%80%AFAM.png Research Articles | Empirical Security - Explore Our New API Docs - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/supporting-epss-our-vision-for-a-more-data-driven-future monthly 0.5 2025-07-02 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/e64c704f-156e-4dff-be95-bd51feb675df/blackhat-founders-img.png Research Articles | Empirical Security - Supporting EPSS: Our Vision for a More Data-Driven Future - Make it stand out Our co-founders, Jay and Michael, presenting the first EPSS paper at Blackhat 2019. https://research.empiricalsecurity.com/research/announcing-the-empirical-security-global-model monthly 0.5 2025-07-02 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/086c6d75-e388-4c22-a293-80e9673b7660/announcing-the-empirical-security-global-model.png Research Articles | Empirical Security - Announcing The Empirical Security Global Model - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/epss-effort-vs-coverage monthly 0.5 2025-10-02 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/2fdfa5d2-7280-4011-a24b-c04ae0283118/coverage-img Research Articles | Empirical Security - EPSS: Effort vs Coverage - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/787b30d9-f468-4dcc-8b24-180c952ea7dd/shift-img.png Research Articles | Empirical Security - EPSS: Effort vs Coverage - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/d4e62cba-30b2-4a5f-8d4a-705a3896f003/epss-effort-vs-coverage.png Research Articles | Empirical Security - EPSS: Effort vs Coverage - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/introducing-epss-version-4 monthly 0.5 2025-07-02 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/51d0dd72-f3a4-4818-ba00-39bb6652f75b/cvss-comparison-img.png Research Articles | Empirical Security - Introducing EPSS v4 - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/probability-and-prediction monthly 0.5 2025-07-02 https://images.squarespace-cdn.com/content/v1/6835e6cf18b10c4263e17646/288fa22f-e942-426e-a88d-f5ea7a0a3180/probability-and-prediction.png Research Articles | Empirical Security - Probability and Prediction - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://research.empiricalsecurity.com/research/looking-beyond-the-soc monthly 0.5 2025-07-02 https://research.empiricalsecurity.com/research/cybersecurity-is-ready-for-local-models monthly 0.5 2025-07-02 https://research.empiricalsecurity.com/research/the-future-of-ai-and-ml-in-cybersecurity monthly 0.5 2025-07-02 https://research.empiricalsecurity.com/research/exploit-prediction-scoring-system monthly 0.5 2025-07-02 https://research.empiricalsecurity.com/research/improving-vulnerability-remediation-through-better-exploit-prediction monthly 0.5 2025-07-02 https://research.empiricalsecurity.com/research/the-complexity-of-prioritising-patching monthly 0.5 2025-07-02 https://research.empiricalsecurity.com/research/what-i-ve-learned-while-training-computers-to-predict-cyber-risk monthly 0.5 2025-07-02 https://research.empiricalsecurity.com/research/for-good-measure-remember-the-recall monthly 0.5 2025-07-02 https://research.empiricalsecurity.com/research/exploring-with-a-purpose monthly 0.5 2025-07-02 https://research.empiricalsecurity.com/research/measuring-vs-modelling monthly 0.5 2025-07-02 https://research.empiricalsecurity.com/research/tag/exploitation monthly 0.5 https://research.empiricalsecurity.com/research/tag/exploited-in-the-wild monthly 0.5 https://research.empiricalsecurity.com/research/tag/github+exploits monthly 0.5 https://research.empiricalsecurity.com/research/tag/vulnerability+management monthly 0.5 https://research.empiricalsecurity.com/research/tag/model monthly 0.5 https://research.empiricalsecurity.com/research/tag/vulnerability monthly 0.5 https://research.empiricalsecurity.com/research/tag/cybersecurity monthly 0.5