–
Threats making headlines
–
Newly exploited this week (KEV)
–
New critical CVEs (72h)
–
Security headlines (7 days)
Is your own business protected? Find out whether someone could send email pretending to be you, and whether your website is set up securely.
Run a free security check →// MAKING HEADLINES
Trending threats
Products and vendors covered by multiple security outlets in the last 72 hours.
// VULNERABILITIES
Top CVEs right now
// VENDOR ADVISORIES
Official advisories
Straight from SonicWall, Ubiquiti, Microsoft, PHP.net, WordPress.org and Wordfence — notable advisories from the last 60 days.
// NEWS WIRE
Latest security headlines
// MY WATCHLIST
Watch your products
Add the products you run. Matching threats are highlighted above. Your list is saved only in this browser — it's never sent to the server.
// HOW IT'S RANKED
Methodology
- Press coverage — how many independent security outlets mention the CVE or product. Two or more is trending; four or more (or any coverage of an actively exploited bug) is a major headline.
- Active exploitation — listed in CISA's Known Exploited Vulnerabilities catalog, with its federal patch deadline.
- Exploit likelihood — FIRST EPSS percentile (chance of exploitation in the next 30 days).
- Severity — CVSS base score from the NVD or the vendor's own advisory. New CVEs can take a few days to be scored.
- Plain-English summaries — short explanations of the top stories, written by an AI model (Claude) from the reports and advisories listed with each one, and refreshed when the story changes.
- Vendor advisories — official notices from SonicWall PSIRT, Ubiquiti, Microsoft MSRC, PHP.net, WordPress.org and Wordfence, including fixed versions.