Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
Fortinet Multiple Products Auth Bypass is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical disclosure (CVSS 9.8) — high severity with a short public awareness window before exploit material typically surfaces.
CISA KEV — confirmed in-the-wild exploitation.
Fortinet Multiple Products Authentication Bypass
Microsoft Windows COM+ Event System Service Privilege Escalation
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in r...
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.