iiinova — where your digital self keeps evolving

Rob Pomeroy @robpomeroy.bsky.social · 09/09/2026

With another record Patch Tuesday, the vulnerability graphs continue to demonstrate what we all know: this is new territory. This screenshot isolates the figures for Microsoft alone. More graphs to be explored at vulntrends.org. #vulnerabilities #PatchTuesday #bugpocalypse

Graph of Microsoft's vulnerabilities discovered over the last 12 months, showing a significant uptick from April 2026 onwards.

000

Rob Pomeroy @robpomeroy.bsky.social · 21/08/2026

The race between automated exploitation and human-led remediation is accelerating. As "time to exploit" shrinks, the challenge for defenders becomes one of scale and speed. Read more at vulntrends.org/blog/when-vu... #CyberSecurity #InfoSec #VulnerabilityManagement

16:9 infographic contrasting fast vulnerability discovery with slower remediation, showing an accelerating discovery lane alongside a congested remediation backlog.

000

Rob Pomeroy @robpomeroy.bsky.social · 19/08/2026

Hear me out: cold frothy milk on your breakfast cereal. Try it and thank me later. Tips for frothing: - Use a french press/cafetière; plunge vigorously - Use semi-skimmed milk or barista-style plant-based alternatives (oat-based is great) #breakfast #upgrade

000

Rob Pomeroy @robpomeroy.bsky.social · 14/08/2026

Can't quite believe what I'm reading. (Another great Brian Krebs article.) krebsonsecurity.com/2026/08/whos... Krebs: "The only sane reaction ... is to block all online ads outright." Bear in mind that he does run (light) advertising on his own site. #advertising #malvertising #privacy #safety

krebsonsecurity.com

Who’s Tracking You? Use This New Service to Find Out

It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is already semi-public, but...

000

Rob Pomeroy @robpomeroy.bsky.social · 03/08/2026

The "which vendor patches the fastest" question has three different answers depending on the metric. Mozilla, Google Chrome and Microsoft lead on VulnTrends' data. vulntrends.org/blog/which-v... #patching #vulnerabilities #msrc #mttp #infosec

16:9 infographic titled ‘Which Vendors Patch the Fastest?’ showing racing cars labelled with technology vendors speeding toward a finish line marked ‘Patch Released.’ Google, Mozilla and Microsoft lead the race, followed by Apple, Samsung, Adobe, Oracle and Cisco, with a side chart illustrating declining mean time to patch over recent years.

000

Rob Pomeroy @robpomeroy.bsky.social · 28/07/2026

Microsoft's July Patch Tuesday was 622 CVEs — the largest ever. Three zero-days, 13 at CVSS 9.8, 422 in Windows alone. Microsoft says AI is part of the discovery picture. Read more: vulntrends.org/blog/the-evo... #vulnerabilities #PatchTuesday #AISecurity #Microsoft

16:9 infographic showing the evolution of Patch Tuesday from 1990s manual updates and floppy disks, through Microsoft’s monthly patching model, to modern cloud automation and future AI-assisted security.

001

Rob Pomeroy @robpomeroy.bsky.social · 26/07/2026

VulnTrends v1.2.0 is out! This update improves the quality of the underlying data and adds explanatory pages to provide context behind every chart. The goal is simple: make software vulnerability trends easier to understand, not just easier to visualise. vulntrends.org #CyberSecurity #AppSec

000

Rob Pomeroy @robpomeroy.bsky.social · 21/07/2026

I've enhanced the data gathered for VulnTrends (v1.1.0), and the picture is even more pronounced than originally seen. It's impossible (and irresponsible) to ignore the impact of frontier (or well-harnessed) LLMs on vulnerability discovery. vulntrends.org #bugpocalpyse #ai #llm #vulnerabilities

Vulnerabilities discovered graph with sharp upward tick on the right (July 2026).

000

Rob Pomeroy @robpomeroy.bsky.social · 20/07/2026

Project Glasswing exposed a structural problem in cybersecurity: discovery is no longer the bottleneck. 1,596 high-severity findings across 281 open-source projects: 97 were patched. The exploit window is now hours. vulntrends.org/blog/ai-find... #cybersecurity #opensource #AI #vulnerabilities

AI Finds Bugs Faster Than Humans Can Fix Them

020

Reposted by Rob Pomeroy

Ben Kuchera @benkuchera.bsky.social · 11/02/2026

Infosec used to be serious

41339277

Rob Pomeroy @robpomeroy.bsky.social · 18/07/2026

Every year brings more CVEs, more advisories and more emergency patches. Does that actually mean software is becoming less secure? I took a deep dive into the data, the history of software engineering, and the emerging impact of AI-assisted vulnerability discovery. vulntrends.org/blog/softwar...

Is software security actually improving? More vulnerabilities. Smarter defences. A better future?

000

Rob Pomeroy @robpomeroy.bsky.social · 14/07/2026

We've entered a different phase of vulnerability discovery. I built vulntrends.org to visualise trends across major vendors, and the "Vulnerabilities Discovered" graph really highlights what's been happening over the last few months. Curious what others think.

Graph showing vulnerabilities discovered over time, with a sharp uptick in the last few months.

000

Rob Pomeroy @robpomeroy.bsky.social · 19/06/2025

Well we can't have everything... 😀

010