Unveiling Vulnerability Insights from the CISA KEV Catalog at BSidesLV | Grey Noise Blog
Summary: A GreyNoise analysis of CISA's Known Exploited Vulnerabilities catalog, presented at BSidesLV, found the average age of CVEs added to the KEV is decreasing, with most 2023 additions made within the first week of assignment. The analysis also found CISA's "known ransomware campaign use" field, added in October 2023, was updated silently 41 times between October 2023 and July 2024, and that fix timelines have standardized to 21 days, with shorter windows indicating higher-priority vulnerabilities.
What you should know: Vulnerabilities flagged for known ransomware use are patched 2.5 times faster, so a silent change to that field in the KEV is a signal your patching queue may need to move before the next cycle.
Read the original at GreyNoise Blog ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026