What do you run? See what attackers are exploiting in it.
Vendor-level counts from CISA's Known Exploited Vulnerabilities catalog. It is not a scan of your systems.
75 CISA KEV entries across these vendors, last 12 months
Pick at least one vendor.
Showing the 3 most-exploited vendors. Tap to change.
Source: CISA KEV catalog snapshot 2026-11-06.
Vendor-level counts from CISA's Known Exploited Vulnerabilities catalog. It is not a scan of your systems.
Latest CVE briefs
All 508 →- CVE-2026-44717 ·MCP Calculate Server RCE9.8
- CVE-2026-97229 ·Critical Unauthenticated GitLab RCEKEV10.0
- CVE-2023-22894 ·Strapi Information DisclosureKEV4.9
- CVE-2026-119977 ·WordPress Core Unauthenticated RCEKEV8.1
- CVE-2026-122013 ·Critical Comfast Router Flaw10.0
- CVE-2026-44327 ·free5GC NEF Authentication Bypass10.0
Start here
What changed, who is affected, and whether it is being exploited.
Security tools by job, backed by 98 side-by-side comparisons.
524 plain definitions and answers, from salting to SASE.
One short email a week. The CVEs worth your time, nothing else.
Most read this month
Browse everything →Best Identity And Access Management Platforms 2026
Compare the best identity and access management platforms for 2026, including Entra ID, Okta, Ping, Duo, JumpCloud, Auth0 and SailPoint.
What is CIS Level 1 vs Level 2 hardening? A Practitioner's Definition
Learn the practical difference between CIS Level 1 and Level 2 hardening, when to use each baseline, and how to deploy them safely.
Does NAT Improve Security? (What It Does—and Doesn’t—Protect)
NAT can reduce unsolicited inbound exposure, but it’s not a security control. Learn what NAT protects, where it fails, and what to use instead.
How to Collect Volatile Evidence During Incident Response (Step-by-Step)
Order of volatility for incident response: capture RAM, processes, sessions and network state before reboot, then hash and log chain of custody.
How to Secure Microsoft Teams Meetings (Checklist + Best Practices)
Secure Microsoft Teams meetings with lobby, MFA, labels, restricted presenters, and audit logs. Step-by-step admin and organizer checklist.
How Service Accounts Become a Security Risk
Service accounts become security risks due to excess privileges, long-lived secrets, poor ownership, and weak monitoring. Learn practical fixes.
Tools for the jobs teams ask us about most
Affiliate links: we may earn a commission at no extra cost to you.
Encrypted vault for team passwords, passkeys and secrets, with shared folders and admin controls.
Password and passkey manager for individuals and families, with apps for every major platform.
Cloud-managed endpoint protection and EDR for small and mid-size fleets.
Consumer antivirus and malware protection for Windows, macOS, iOS and Android.
Network vulnerability scanner that checks hosts against a large library of known CVEs.
Versioned cloud backup for computers, servers and cloud apps.
One CVE. Three briefings.
Every vulnerability page is written as an Escalation View: the same alert, briefed for your whole team, from the 30-second summary to the copy-paste runbook.
See it on the latest CVEs →New comparisons
All 98 →CMMC Compliance Software for Small Contractors
Compare Vanta, Drata and Secureframe for CMMC compliance software for small contractors, including features, fit and published pricing.
HIPAA compliant backup for small practices
Compare Acronis Cyber Protect and Veeam for HIPAA compliant backup for small practices, including licensing, capabilities and published pricing.
Nessus Pricing: Plans, License Costs and Alternatives
Compare Nessus pricing, license terms, plan limits and published alternatives for small and mid-size organizations.
NordLayer pricing: plans, costs and alternatives
Compare NordLayer pricing by plan, user count and billing term, then see published alternatives from Twingate and Cloudflare Zero Trust.
Threat digests
All →- Cybersecurity Threat Digest November 5, 2026
- Cybersecurity Threat Digest November 4, 2026: WordPress, Mobile, and Supply-Chain Threats
- Cybersecurity Threat Digest November 3, 2026: Android TV Botnet Disrupted, Harvard Breach, and Critical Admin Panel Flaws
- Threat Digest November 2, 2026: GitLab RCE, Ransomware
- Threat Digest November 1, 2026: AI Attacks and Router Exploits
Learn
FAQs
All 208 →Glossary
All 316 →Analysis
All 11 →- Critical Vulnerabilities, October 17 to 24, 2026: What to Patch First
- AI-Assisted Phishing: Why Security Awareness Training Is Necessary but Insufficient
- Cloud Repatriation and Its Implications for Security Architecture
- Passkeys Won the Standards War, But the Rollout is Where It Gets Messy
- Ransomware Insurance: A Double-Edged Sword in Incident Response
The Monday security brief
The CVEs worth patching, the tools worth a look, and nothing else. Free, one email a week, unsubscribe anytime.
Subscribe free →