Vulnerabilities under active attack

Hundreds of CVEs are published every day, but only a handful are actually exploited. This feed keeps only vulnerabilities with confirmed in-the-wild exploitation: CISA adds them to the Known Exploited Vulnerabilities catalog after incidents are verified. You get the CVE, vendor and product, the date it was added, the BOD 22-01 remediation deadline and whether it is used in ransomware campaigns. The AI briefing explains why each entry matters and what to fix first.