Top 5
Vulnerabilities & Breaches
Weekly Briefing
Top 5 Hacker-Relevant Vulnerabilities
Ranked from a decision-tree-based prioritization model trained on over 100,000 vulnerabilities, extending CVSS and EPSS with real-time attacker context.
Calendar Week 36 2026
0 vulnerabilities scanned this weekMonthly Briefing
Top 5 Recent Breaches
The five most recent breaches from our monthly recap of security incidents caused by unpatched, hacker-relevant vulnerabilities.
Philips
Cl0p exploited an unauthenticated input-validation flaw in PTC Windchill and FlexPLM to compromise an internal Philips server and exfiltrate data, naming Philips alongside Shell, GE, and Fiserv on its leak site as part of a wider campaign against exposed PLM instances
University of Nottingham
ShinyHunters exploited an Oracle PeopleSoft PeopleTools vulnerability to access the University of Nottingham's student records system, exposing data on 454,600 current and former students as part of a wider campaign spanning over 300 PeopleSoft instances
Nissan
ShinyHunters exploited a missing-authentication flaw in Oracle PeopleSoft to access personal data of current and former Nissan employees across the US, Canada, Mexico, and Brazil, as part of a wider campaign claiming over 300 compromised PeopleSoft instances
Grafana Labs
Attackers exfiltrated Grafana Labs' entire private GitHub codebase after a supply-chain compromise of 42 @tanstack/* npm packages leaked a GitHub workflow token that was missed during rotation
U.S. Federal Civilian Executive Branch
A China-linked APT deployed the FIRESTARTER backdoor on a federal agency's Cisco Firepower device via two RCE and auth-bypass flaws, persisting through reboots and firmware updates despite an emergency patch directive
Don't be the next name on this list
ENTRYZERO continuously monitors your attack surface and tells you which vulnerabilities are actually exploitable, before attackers find them
