Company intelligence
Empirical Security
Security Intelligence and Decision Support, Tailored to your Enterprise.
About Empirical Security
Empirical builds mathematical models for security data. We maintain the world’s most advanced global models for cybersecurity, and we build local models that respond to your enterprise’s specific context and threat landscape.
Verified activity
Signals from Empirical Security
14 published signals
Research & Knowledge
Empirical Security reported that of the 51,219 CVEs published in 2026 that NVD has settled, 20,076 are marked as Deferred.
Reported by Jerry Gamblin
Research & Knowledge
Empirical Security published 12% of CVEs in 2026 with the CNA tag.
Reported by Jerry Gamblin
Research & Knowledge
Empirical Security found that three of the 26 CNAs tagged nearly every record in 2026.
Reported by Jerry Gamblin
Research & Knowledge
Empirical Security found that the CNA tag is about the tag, not whether a fix exists.
Reported by Jerry Gamblin
Research & Knowledge
Empirical Security found that fifteen of the 26 CNAs tagged none of the CVEs in 2026.
Reported by Jerry Gamblin
Research & Knowledge
Empirical Security found that NVD marked 20,075 of this year's CVEs as Deferred.
Reported by Jerry Gamblin
Research & Knowledge
Empirical Security found that NVD adds its own Patch label to about three in ten of the CVEs it analyzes.
Reported by Jerry Gamblin
Research & Knowledge
Empirical Security analyzed 26 CNAs that published 250 or more CVEs in 2026.
Reported by Jerry Gamblin
Research & Knowledge
Empirical Security published CVE-2026-58138, a 9.8 CVSS vulnerability affecting Netflix's Conductor workflow engine, which is unauthenticated and unsandboxed, with confirmed exploitation in the last 7 days.
Reported by Empirical Security
Presence & Recognition
Empirical Security co-founder and Chief Data Scientist Jay Jacobs delivered insights on the Noise2Signal podcast.
Reported by Empirical Security
Presence & Recognition
Empirical Security is hosting a booth at Falcon 2026 in Las Vegas with booth number 1046.
Reported by Empirical Security
Research & Knowledge
Empirical Security reported that 2026 has already published more CVEs than all of 2025 (48,154) and is 9,754 ahead with four months left to count.
Reported by Jerry Gamblin
Research & Knowledge
Empirical Security reported that 2026 had 57,908 CVEs year-to-date, up 86.5% year-over-year, running at 396 a day in August compared to 238 a day for the year so far.
Reported by Jerry Gamblin
Research & Knowledge
Empirical Security reported that August 2026 closed with 12,291 published CVEs, up from 3,628 in August 2025.
Reported by Jerry Gamblin