- Home
- Threat level
- 27 October 2026
Threat level on 27 October 2026
Daily snapshot from the Blacknote live engine.
Blacknote threat level
Threat profile
Last 7 days
- 0–19Low
- 20–39Guarded
- 40–59Elevated
- 60–79High
- 80–100Severe
- Ransomware activity (weight 25%): 77 of 100, 48 victims claimed in 24 h
- Actively exploited vulnerabilities (weight 25%): 55 of 100, 6 newly exploited (7 d) · 38 critical CVEs (7 d)
- Confirmed data breaches (weight 20%): 6 of 100, 1 breaches added (7 d) · 57 incident reports (7 d)
- Official warnings (weight 15%): collecting, 0 NCSC warnings (14 d)
- Community signals (weight 15%): 98 of 100, 97 HN stories
Events that day
-
48 new victims claimed on ransomware leak sites in the last 24 hours
18 active groups. Claims are unverified; victims are not named here.
-
Critical vulnerability CVE-2026-58256 in JeromeDevome (CVSS 9.1)
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject…
-
UNM Health ransomware attack disrupts patient care, surgeries
The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. [...]
-
Hackers hijack Convertr analytics script to steal payment card data
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during…
-
Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea
Ukrainian national Artem Stryzhak, 36, had pleaded guilty last year to charges related to participating in at least two well-known ransomware groups.
-
Critical vulnerability CVE-2026-112352 (CVSS 9.1)
Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to…
-
Critical vulnerability CVE-2026-112352 in Sunhillo Corporation (CVSS 9.1)
Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to…
-
Critical vulnerability CVE-2026-48360 in Adobe (CVSS 9.6)
Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary…
-
Critical vulnerability CVE-2026-114595 in The EPICS Community (CVSS 9.3)
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an…
-
Critical vulnerability CVE-2026-108015 in HCLSoftware (CVSS 9.1)
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts…
-
Critical vulnerability CVE-2026-108142 in Veeam (CVSS 9.1)
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
-
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key…
-
Microsoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting…
-
42 new victims claimed on ransomware leak sites in the last 24 hours
18 active groups. Claims are unverified; victims are not named here.
-
Critical vulnerability CVE-2026-48360 (CVSS 9.6)
Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary…
-
Critical vulnerability CVE-2026-105781 (CVSS 10)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…
-
Critical vulnerability CVE-2026-105780 (CVSS 9.9)
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…
-
Critical vulnerability CVE-2026-105779 (CVSS 9.1)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…
-
Critical vulnerability CVE-2026-105489 (CVSS 9.9)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…
-
Critical vulnerability CVE-2026-104354 (CVSS 9.1)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…
-
Critical vulnerability CVE-2026-104353 (CVSS 9.9)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
-
Critical vulnerability CVE-2026-104351 (CVSS 9.9)
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result…
-
Critical vulnerability CVE-2026-104353 in Adobe (CVSS 9.9)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
-
Critical vulnerability CVE-2026-105780 in Adobe (CVSS 9.9)
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…
-
Critical vulnerability CVE-2026-105489 in Adobe (CVSS 9.9)
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…
Indicative assessment by Blacknote Intelligence, not an official threat level. How the score works.
Archive