Exploited vulnerabilities
Assessed by an AI model against this signal's rubric. Describes conditions; not a forecast or advice.
Pending
This signal has not been assessed yet. The next scheduled run will rate it.
Why it matters
Mass exploitation of a flaw in widely used software usually starts days or weeks before the breach headlines.
What moves it
Zero-days in edge devices and enterprise software, exploit sharing, slow patching, ransomware crews.
How it's rated
Alert
An emergency directive or equivalent for mass exploitation of a ubiquitous product, with confirmed widespread compromise.
Watch
11 or more added in 7 days (the busiest ~5% of weeks since 2024), or mass exploitation of a widely used product.
Normal
Fewer than 11 vulnerabilities added to CISA's Known Exploited Vulnerabilities catalogue in the past 7 days.