- Home
- Threat level
- 29 October 2026
Threat level on 29 October 2026
Daily snapshot from the Blacknote live engine.
Blacknote threat level
Threat profile
Last 7 days
- 0–19Low
- 20–39Guarded
- 40–59Elevated
- 60–79High
- 80–100Severe
- Ransomware activity (weight 25%): 41 of 100, 28 victims claimed in 24 h
- Actively exploited vulnerabilities (weight 25%): 62 of 100, 10 newly exploited (7 d) · 28 critical CVEs (7 d)
- Confirmed data breaches (weight 20%): 7 of 100, 1 breaches added (7 d) · 91 incident reports (7 d)
- Official warnings (weight 15%): collecting, 0 NCSC warnings (14 d)
- Community signals (weight 15%): 100 of 100, 131 HN stories
Events that day
-
28 new victims claimed on ransomware leak sites in the last 24 hours
13 active groups. Claims are unverified; victims are not named here.
-
Critical vulnerability CVE-2023-22793 in Veeam (CVSS 9.3)
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization…
-
Binance probes potential $5.8 billion crypto-theft hack
Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest…
-
Hugging Face malware campaign returns to hijack GPUs for crypto mining
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded…
-
Japan Airlines suffers third-party data breach exposing passenger info
Japan Airlines (JAL) has announced that a data breach at Amadeus's Passenger Service System exposed the data of about 92,000 customers. [...]
-
Polymarket halts trading after crypto-draining script breach, $2.5M traced
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute…
-
Critical vulnerability CVE-2026-103093 in Servicenow (CVSS 9.4)
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could…
-
Critical vulnerability CVE-2026-61707 in socfortress (CVSS 9)
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported…
-
Critical vulnerability CVE-2026-61645 in docat-org (CVSS 9.1)
Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the…
-
Limited reports of PHP bug exploitation emerge
One cyber firm listed a half-dozen exploitations of the PHP2Shell bugs, and another identified a well targeted, suspected Chinese campaign that breached U.S.…
-
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and…
-
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco…
-
Critical vulnerability CVE-2026-93680 in IBM (CVSS 9.8)
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.
-
32 new victims claimed on ransomware leak sites in the last 24 hours
13 active groups. Claims are unverified; victims are not named here.
-
Critical vulnerability CVE-2026-118769 in Randombit (CVSS 9.2)
Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size converted a size_t…
-
Critical vulnerability CVE-2026-118762 in monkeytypegame (CVSS 9.3)
Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on…
-
Critical vulnerability CVE-2026-93680 (CVSS 9.8)
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.
-
Critical vulnerability CVE-2026-119145 (CVSS 9.9)
Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not…
-
Critical vulnerability CVE-2026-110186 (CVSS 9.8)
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
-
Critical vulnerability CVE-2026-107329 (CVSS 9.9)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of…
-
Critical vulnerability CVE-2026-107328 (CVSS 9.9)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization…
-
Critical vulnerability CVE-2026-107327 (CVSS 9.9)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.
-
Critical vulnerability CVE-2026-104339 (CVSS 9.8)
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special…
-
Federal bankruptcy courts contractor says no data stolen during cyber intrusion
"No data was extracted,” a spokesperson for BAE Systems, a federal contractor, told Recorded Future News about its probe into a cyberattack against its…
-
Critical vulnerability CVE-2026-119145 in frappe (CVSS 9.4)
Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not…
Indicative assessment by Blacknote Intelligence, not an official threat level. How the score works.
Archive