Security Signal

Threat dashboard

Threat levelHigh9 stories about actively exploited flaws in the last 7 days

265stories, 30 days 14exploited 29breaches & ransomware 14new KEV entries

Key insights

180 stories this week, ▲ 112% on the previous week.
7 involve vulnerabilities exploited in the wild, no change on the previous week.
18 breaches or ransomware attacks reported, ▲ 64% on the previous week.
CISA added 34 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (13 sources): PHP2Shell: What to know about two critical PHP flaws.

Activity, last 4 weeks

Less More

Vulnerabilities to watch

CVE-2024-27834Apple Multiple Products
CVE-2026-109618PHP Group PHP
CVE-2026-109619PHP Group PHP
CVE-2026-110447Collabora Collabora Online – Built-in CODE Server
CVE-2026-111357Ivanti Connect Secure
CVE-2026-111497Google Brotli

New exploited flaws by vendor (CISA KEV)

Topics

Source mix

Confidence

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Corroborated 75Breach / leak14 h ago

North Korean fake job interview led to $6.3B Binance heist

2 sources: The Register (Security), Help Net Security
Corroborated 75Malware5 days ago

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

2 sources: The Hacker News, Dark Reading