The Q3 Vulnerability Pulse: Discovery ≠ Exploitation

Welcome to this week’s edition of the Threat Source newsletter. I've been following a lot of (sometimes heated) threads and discussions lately about the current vulnerability landscape. I learned new words/phrases such as Summer of Hell (although I'm writing this with 1°C/34°F outside), Vulnpocalypse, Bugmageddon, Bugpocalypse, Breachpocalypse... We crossed the 70k mark, and it's only the end of September. This has never been seen before — I think we can agree this number is skyrocketing. Also, CVE numbering organically grew into the six-digit range.

Published 17-Oct-2026 22:18 UTC · First seen 15-Oct-2026 18:19 UTC

Sources

• Cisco Talos blog · 15-Oct-2026