Vulnerabilities
- CVEs published in the last 24 hours
- —
- Daily average over the last 30 days
- —
- P1 CVEs published this week
- —
- SEC breach disclosures in the last 90 days
- —
The highest-risk CVEs
Ranked by CyberLoop Score, our 0–100 risk rating. A score of 85 or more triggers an immediate alert.
Loading…
CVEs published per day
New CVEs per day over the last 30 days, with the 7-day average.
Search the record
Look up a vendor, a product you run or a CVE ID. Results are ranked by CyberLoop Score, highest first.
Search the vendor (cisco) or the product you actually run (linux, python); two words narrow the result. Leave the box empty to browse the most recent CVEs — the date window applies only then.
CyberLoop Score is our own 0–100 risk number: the CVE's CVSS severity, weighted by how widespread the affected software is and how exploitable the flaw is in practice. P1s at 85 or above also trigger an immediate alert rather than waiting for the next digest.
Breach disclosures
Companies that have told the SEC they were breached
Every material cybersecurity incident disclosed to the Securities and Exchange Commission that we hold, newest first.
Filters as you type. Locations are EDGAR's own "City, ST" form, so use the two-letter state code. 8-K covers amendments (8-K/A) too — those revise an earlier disclosure and are usually where the real impact is stated.
Since December 2023 a US public company must report a material cybersecurity incident on Form 8-K under Item 1.05, usually within four business days of judging it material. Foreign private issuers have no such item, so their disclosures are picked out of Form 6-K by language instead. This is a company stating on the record that it was breached — a handful arrive in a typical month, so the list is short by nature, not because it is filtered.