Daily briefing
Threat & Vulnerability Hub
A cyber awareness briefing: the vulnerabilities attackers are exploiting right now, ranked by real-world exploitation and impact, with every claim linked to its source.
Bottom line
Today's top 5 CVEs
Every recently exploited vulnerability is scored out of 100 on eight public signals, and the five highest scores are shown. Open "Why this rank" on any card to see every point. How the score works
Threat news
Incidents and advisories worth knowing about. High impact marks items that affect widely used IT management, security or cloud services.
Latest headlines
Straight from the source, refreshed every 15 minutes.
BleepingComputer
Newest firstHacker News
Security stories, last 48 hWatchlist
Exploited or close to it, but ranked below today's top 5.
Also tracking
| CVE | Product | CVSS | Exploited | KEV | Source | Rapid7 |
|---|
CISA Known Exploited Vulnerabilities
Recent additions to the US government's list of vulnerabilities confirmed exploited in the wild.
Additions per day
Last 30 days · hover a bar for the countRecent additions
| Added | CVE | Vendor | Fed. due |
|---|
Past editions
Each morning's top 5, kept for 90 days.
Daily top 5 history
Weekly view →| Edition | Rank | CVE | Priority |
|---|
Sources & method
How the top 5 is scored
Recalculated hourly · out of 100Candidates are every vulnerability CISA added to its Known Exploited Vulnerabilities list in the last 30 days, plus "analyst picks": vulnerabilities a vendor or researcher has confirmed are exploited but CISA hasn't listed yet, each with a linked source. Every candidate is scored on the same eight signals:
| Signal | Max | How points are given |
|---|---|---|
| Confirmed exploited | 20 | 20 if on CISA KEV; 15 for an analyst pick with vendor/researcher evidence |
| Freshness | 10 | Added or disclosed ≤3 days ago 10 · ≤7 days 8 · ≤14 days 5 · ≤30 days 2 |
| Ransomware use | 5 | 5 if CISA reports known ransomware use |
| Exploit likelihood | 15 | EPSS percentile × 15 (EPSS predicts how likely exploitation is in the next 30 days) |
| Severity | 15 | Higher of CVSS v4 and v3: ≥9.0 15 · ≥7.0 10 · ≥4.0 5 · lower 2 |
| Attack surface | 10 | From the CVSS vector: reachable over the network 4 · no login needed 4 · no user click needed 2 |
| Blast radius | 15 | Remote access/RMM, edge/VPN/firewall 15 · email, identity 13 · backup, virtualization, SD-WAN 12 · web platforms, endpoint OS 8 · other 3 |
| News momentum | 10 | Articles mentioning it in the last 14 days: 1 → 3 · 2 → 5 · 3 → 7 · 4 → 8 · 5+ → 10 |
How items are verified
Each CVE needs at least one primary source: the vendor's own advisory, CISA, NVD or a national CERT. Independent reporting is added on top. Anything only a secondary outlet reports is marked "Reported – verify".
What the score can and can't tell you
- Every input is public and every point is shown on the card, so anyone can check a ranking.
- Urgency labels follow the score: 75+ "Patch now", 60–74 "Within 72 hours", below 60 "This week".
- The score doesn't know your environment. A #7 that you run everywhere can matter more than a #1 you don't run at all.
- News momentum relies on keyword matching and can over- or under-count, so it's capped at 10 points.
Cross-checks
Every CVE on the site is checked against the Rapid7 Vulnerability & Exploit Database, re-checked every 6 hours. The CVE search page looks any CVE up live across NVD, CVE.org, Rapid7, Vulners and Qualys.
Primary sources
- CISA KEV catalog and CISA advisories
- NVD, CVE.org, UK NCSC, Canadian Cyber Centre, CERT-EU
- Vendor security advisories: Microsoft, Cisco, Fortinet, Palo Alto Networks, Ivanti, Citrix, ConnectWise, Kaseya, N-able, BeyondTrust and others
Research and reporting
- Vulnerability intelligence: Rapid7, Vulners, Qualys
- Researchers: watchTowr, Volexity, Mandiant/Google, Huntress, Horizon3.ai
- Press & community: BleepingComputer, Hacker News, SecurityWeek, The Hacker News, The Record, Dark Reading
Limits
This is an aggregated briefing, not a substitute for vendor advisories. Confirm fixed versions with the vendor before change windows.