Loading CISA's list...
Security bugs CISA has confirmed attackers are using, newest first, with how old each bug really is.
As of today
...added in the last 7 daysLoading
Loading CISA's list...
Security bugs CISA has confirmed attackers are using, newest first. Bug age counts from the day a bug went public, not the day CISA listed it, so you can tell an old bug under new attack from a brand-new one. Tap any bug for the details.
Facts come from CISA's catalog and CVE records each time this page loads, and it checks for updates every 15 minutes while open. A small data service adds CVE details, CISA's SSVC ratings and Nuclei template checks every 15 minutes.
Priority is this page's own order from public signals, not CISA's.
P0: CISA's own urgency flags, meaning forensic triage, ransomware, or a deadline of 5 days or less.
P1: CISA rates it automatable, or a public Nuclei scanner template exists.
P2: the rest of what CISA confirms.
Early signs come from CIRCL's public sightings. They are unconfirmed reports, not CISA's word, and they live in their own section.
Unofficial page, not run by or connected to CISA.
Federal deadlines bind US federal agencies only. Check the vendor's advisory before you act on anything here.
Today's date and "days ago" follow your device's clock and time zone.
No accounts and no tracking. The only thing saved is your light or dark choice, on this device, and only if you change it.