Top 5
Vulnerabilities & Breaches
Weekly Briefing
Top 5 Hacker-Relevant Vulnerabilities
Ranked from a decision-tree-based prioritization model trained on over 100,000 vulnerabilities, extending CVSS and EPSS with real-time attacker context.
Calendar Week 35 2026
0 vulnerabilities scanned this weekMonthly Briefing
Top 5 Recent Breaches
The five most recent breaches from our monthly recap of security incidents caused by unpatched, hacker-relevant vulnerabilities.
University of Nottingham
ShinyHunters exploited an Oracle PeopleSoft PeopleTools vulnerability to access the University of Nottingham's student records system, exposing data on 454,600 current and former students as part of a wider campaign spanning over 300 PeopleSoft instances
Nissan
ShinyHunters exploited a missing-authentication flaw in Oracle PeopleSoft to access personal data of current and former Nissan employees across the US, Canada, Mexico, and Brazil, as part of a wider campaign claiming over 300 compromised PeopleSoft instances
Grafana Labs
Attackers exfiltrated Grafana Labs' entire private GitHub codebase after a supply-chain compromise of 42 @tanstack/* npm packages leaked a GitHub workflow token that was missed during rotation
U.S. Federal Civilian Executive Branch
A China-linked APT deployed the FIRESTARTER backdoor on a federal agency's Cisco Firepower device via two RCE and auth-bypass flaws, persisting through reboots and firmware updates despite an emergency patch directive
LexisNexis Legal & Professional
FulcrumSec used the React2Shell vulnerability to breach LexisNexis' AWS environment, exfiltrating roughly 2 GB of structured data including Redshift tables and plaintext Secrets Manager secrets spanning 21,000+ customer accounts
Don't be the next name on this list
ENTRYZERO continuously monitors your attack surface and tells you which vulnerabilities are actually exploitable, before attackers find them
