Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical exposure
New critical Democritus D8s-strings Code Execution (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Democritus D8s-timer Code Execution (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Democritus D8s-python Code Execution (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.