Cyber news feed: exploited in the wild

Stories about vulnerabilities attackers are using now, including new entries in CISA’s Known Exploited Vulnerabilities catalogue.

Filtered byExploited Confidence: Confirmed Clear all filters

Threat dashboard (filtered)

Threat levelElevated5 stories about actively exploited flaws in the last 7 days

8stories, 30 days 8exploited 0breaches & ransomware 8new KEV entries

Key insights

3 stories this week, ▼ 40% on the previous week.
3 involve vulnerabilities exploited in the wild, ▼ 40% on the previous week.
0 breaches or ransomware attacks reported, no data for the previous week yet.
CISA added 14 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (13 sources): PHP2Shell: What to know about two critical PHP flaws.

Activity, last 4 weeks

Less More

Vulnerabilities to watch

CVE-2024-27834Apple Multiple Products
CVE-2026-109618PHP Group PHP
CVE-2026-109619PHP Group PHP
CVE-2026-110447Collabora Collabora Online – Built-in CODE Server
CVE-2026-111357Ivanti Connect Secure
CVE-2026-111497Google Brotli

New exploited flaws by vendor (CISA KEV)

Topics

Actively exploited8

Source mix

Official8

Confidence

Confirmed8

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

Confirmed 100Exploited6 h ago

Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026

Source: Cisco Security Advisories

CVE-2026-111497
Confirmed 100Exploited13 h ago

PHP2Shell: What to know about two critical PHP flaws

2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity

CVE-2026-114625 CVE-2026-109618 CVE-2026-109619 CVE-2026-48356 CVE-2026-111497 CVE-2026-41709+6 more
Confirmed 100Exploited5 days ago

CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories

CVE-2026-111497
Confirmed 100Exploited5 days ago

CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories

CVE-2026-109618 CVE-2026-109619
Confirmed 100Exploited7 days ago

CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software) added to CISA Known Exploited Vulnerabilities

Source: CISA Known Exploited Vulnerabilities

CVE-2026-76418
Confirmed 100Actively exploited8 days ago

Cisco Expressway Series Security Hardening Release: October 2026

Source: Cisco Security Advisories
Confirmed 100Exploited10 days ago

Node2Shell CVEs

Source: Fortinet PSIRT

CVE-2026-111497 CVE-2026-105482 CVE-2026-105483 CVE-2026-106069 CVE-2026-105481 CVE-2026-106072
Confirmed 100Exploited13 days ago

CVE-2026-110447 (Collabora Collabora Online – Built-in CODE Server) added to CISA Known Exploited Vulnerabilities

Source: CISA Known Exploited Vulnerabilities

CVE-2026-110447