Threat dashboard

What has been reported over the last 30 days: attacks, exploited vulnerabilities, affected vendors and organisations, and the attacker techniques involved. Unverified stories are excluded.

Key insights

• 180 stories this week, ▲ 112% on the previous week.
• 7 involve vulnerabilities exploited in the wild, no change on the previous week.
• 18 breaches or ransomware attacks reported, ▲ 64% on the previous week.
• CISA added 34 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
• Most covered story this week (13 sources): PHP2Shell: What to know about two critical PHP flaws.

Stories per day

exploited in the wild other stories

Vulnerabilities to watch

Ranked by: in CISA KEV, then EPSS (chance of exploitation in the next 30 days), then CVSS. Vendors, organisations and techniques are tagged automatically and may be incomplete.