Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Daily summary
Microsoft SharePoint added to CISA KEV — confirmed in-the-wild exploitation.
Top threats today
Three highest-priority changes — analyst brief, not a CVE dump.
Critical active threat
CVE-2025-53770Microsoft SharePoint Deserialization of Untrusted Data
Actively exploited (CISA KEV)
Listed on CISA KEV
Microsoft SharePoint Deserialization is on CISA KEV — confirmed in-the-wild exploitation. Expect continued targeting while the issue remains on the catalog.