Security ArtifactsDFIR Intelligence
SearchSign inSubscribe

Automated feed

Threat Wire

Aggregated every six hours from CISA KEV, NIST NVD, CISA advisories and trade reporting, then deduplicated and stored. Free to read, and it will stay that way, because these are links to other people's public work. What a membership adds is the analyst layer on top of them.

What “Exploited” means

The entry is on CISA’s Known Exploited Vulnerabilities catalogue, so it is being used against real targets rather than theorised about. A medium-severity KEV outranks a critical nobody has weaponised, and it is the one thing worth filtering on first.

Today1

  1. THN

    Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules

    Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several exploit paths exist through contributed modules, and at least one known path needs no login.

Yesterday6

  1. BLEEPCVE-2026-0322

    Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

    Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]

  2. REG

    Cisco make-me-root email bug exploited as a 0-day by unknown crims

    Both Switchzilla and CISA sound the alarm

  3. BLEEP

    Cisco patches new Secure Email Gateway zero-day exploited in attacks

    Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]

  4. REG

    Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks

    Vendor promises fix for separate privilege-escalation flaw in the coming weeks

  5. BLEEP

    CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. [...]

  6. THNCVE-2026-104935

    CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability. The security flaw, tracked as CVE-2026-104935 (CVSS score: 8.6), is a case of authentication bypass impacting ICS

Tuesday 13 October1

  1. BLEEP

    Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

    Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...]

Every entry links to its original source. Severity is the publisher's own rating where one exists. We don't re-score other people's advisories.