Cyber news feed: exploited in the wild

Stories about vulnerabilities attackers are using now, including new entries in CISA’s Known Exploited Vulnerabilities catalogue.

Threat dashboard (filtered)

Key insights

1 stories this week, no change on the previous week.
1 involve vulnerabilities exploited in the wild, no change on the previous week.
0 breaches or ransomware attacks reported, no data for the previous week yet.
Most reported vendor this week: Cisco (1 story).
CISA added 3 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (3 sources): CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL).

17 stories · busiest Thu 5 (3) · last 7 days ▼ 11% vs the week before

Exploited Breach / ransomware Other · click a day to filter

CVE-2026-109618PHP Group PHP · EPSS 100%
CVE-2026-109619PHP Group PHP · EPSS 100%
CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software · EPSS 1%

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.