Every CVE attackers weaponize. Every breach that follows.

Which CVEs and CISA KEV additions to patch first, ranked by confirmed exploitation and reachability, not just CVSS score.

CVE & patch priority 10 Sep 2026

New Hacking Techniques and Critical CVEs, 31 Aug to 6 Sep 2026

Kestra's CVSS 10.0 RCE, SonicWall's pre-auth SSRF, and a PaperCut auth-bypass chain lead 10 new CISA KEV additions this week.

Read the report

CVE & patch priority 25 Aug 2026

New Hacking Techniques and Critical CVEs, 17 to 23 Aug 2026

CISA added 9 vulnerabilities to the Known Exploited Vulnerabilities catalog this week. vCenter fuels ransomware in 47 countries; patch that first.

Read the report

CVE & patch priority 19 Aug 2026

New Hacking Techniques and Critical CVEs, 10 to 16 Aug 2026

SAP Commerce Cloud CVSS 10.0 exploited in 3 days, Metabase 10.0 SQLi hits CISA KEV, Cisco ASA VPN DoS attacks. What to patch first this week.

Read the report

Confirmed breaches, ransomware activity, and disclosed incidents, verified against primary sources, with what happened separated from what's still just a claim.

Threat intel & breaches 10 Sep 2026

Cyber Threats and Breaches, 31 Aug to 6 Sep 2026

McKesson's Okta SSO breach, Berlin's Rhysida ransomware theft, and a 153M driver's license listing. This week's five breaches, explained.

Read the report

Threat intel & breaches 25 Aug 2026

Cyber Threats and Breaches, 17 to 23 Aug 2026

DGFiP's 678,000-record breach, claimed Azure data theft, and Medusa ransomware's 500-victim milestone.

Read the report

Threat intel & breaches 19 Aug 2026

Cyber Threats and Breaches, 10 to 16 Aug 2026

Ceva Logistics breach hits Bol and Steam buyers, Trezor exposes 14,000 customers, LiteLLM attack touches 2,500 orgs.

Read the report

Threat intel & breaches 23 Jul 2026

Cyber Threats and Breaches, 13 to 19 Jul 2026

Fairlife ransomware halts US milk production, EY client tax data stolen, SonicWall VPN zero-days exploited pre-disclosure.

Read the report