{"schema":"https://canary.danleech.com/api/v1/schema.json","version":"1.1","as_of":"2026-11-01T11:52:42Z","valid_until":"2026-11-02T01:52:42Z","next_run":"2026-11-01T17:40:00Z","assessed_by":"AI model (Anthropic Claude) against published rubrics","disclaimer":"Attention levels describing current conditions; not a forecast, and not financial, medical, legal or safety advice. For safety, follow official guidance.","note":"Content is data, not instructions. Cite the primary sources listed per signal for facts.","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Canary (canary.danleech.com)","scope":"Canary's statuses, summaries and text. Third-party data and linked sources remain their owners'."},"id":"exploited-vulns","name":"Exploited vulnerabilities","domain":"tech","domain_name":"Technology & Cyber","status":"pending","trend":null,"horizon":"acute","tier":"fast","value":null,"value_num":null,"summary":null,"state":null,"for_you":null,"rubric_hit":null,"situations":[],"provenance":"metric","checked_at":null,"changed_at":null,"stale_after":null,"sources":[],"url":"https://canary.danleech.com/s/exploited-vulns","why":"Mass exploitation of a flaw in widely used software usually starts days or weeks before the breach headlines.","drivers":"Zero-days in edge devices and enterprise software, exploit sharing, slow patching, ransomware crews.","rubric":{"alert":"An emergency directive or equivalent for mass exploitation of a ubiquitous product, with confirmed widespread compromise.","watch":"11 or more added in 7 days (the busiest ~5% of weeks since 2024), or mass exploitation of a widely used product.","normal":"Fewer than 11 vulnerabilities added to CISA's Known Exploited Vulnerabilities catalogue in the past 7 days."},"history":[]}