// MAKING HEADLINES
Trending threats
Products and vendors covered by multiple security outlets in the last 72 hours.
// VULNERABILITIES
Top CVEs right now
// VENDOR ADVISORIES
Official advisories
Straight from SonicWall, Ubiquiti, Microsoft, PHP.net, WordPress.org and Wordfence — notable advisories from the last 60 days.
// NEWS WIRE
Latest security headlines
// MY WATCHLIST
Watch your products
Add the products you run. Matching threats are highlighted above. Your list is saved only in this browser — it's never sent to the server.
// HOW IT'S RANKED
Methodology
- Press coverage — how many independent security outlets mention the CVE or product. Two or more is trending; four or more (or any coverage of an actively exploited bug) is a major headline.
- Active exploitation — listed in CISA's Known Exploited Vulnerabilities catalog, with its federal patch deadline.
- Exploit likelihood — FIRST EPSS percentile (chance of exploitation in the next 30 days).
- Severity — CVSS base score from the NVD or the vendor's own advisory. New CVEs can take a few days to be scored.
- Vendor advisories — official notices from SonicWall PSIRT, Ubiquiti, Microsoft MSRC, PHP.net, WordPress.org and Wordfence, including fixed versions.