#metrics

2 articles

"Exploit time dropped from 30 days to 30 minutes" — the 30 minutes was one researcher, one patch, and a denial-of-service proof of concept

2026-08-15Security

The claim is everywhere and the argument behind it is good. The number is not a measurement. It comes from a single blog post in May 2026 describing a local experiment on React, and the industry statistics stacked around it come from different vendors counting different things.

A ransomware group called Storm posted 19 victims in eight days — and it is not the Storm you have already read about

2026-08-15Security

Two law firms, an equine hospital, a mental health charity and three metal companies, published in batches with a two-day gap between attack and leak. It shares a name with Microsoft's Storm-1175, which is a different actor entirely.