- Home
- Threat level
- 30 October 2026
Threat level on 30 October 2026
Daily snapshot from the Blacknote live engine.
Blacknote threat level
Threat profile
Last 7 days
- 0–19Low
- 20–39Guarded
- 40–59Elevated
- 60–79High
- 80–100Severe
- Ransomware activity (weight 25%): 42 of 100, 28 victims claimed in 24 h
- Actively exploited vulnerabilities (weight 25%): 49 of 100, 8 newly exploited (7 d) · 29 critical CVEs (7 d)
- Confirmed data breaches (weight 20%): 8 of 100, 1 breaches added (7 d) · 97 incident reports (7 d)
- Official warnings (weight 15%): collecting, 0 NCSC warnings (14 d)
- Community signals (weight 15%): 96 of 100, 111 HN stories
Events that day
-
28 new victims claimed on ransomware leak sites in the last 24 hours
14 active groups. Claims are unverified; victims are not named here.
-
Polymarket confirms cyberattack on third-party provider after outages
The company suffered outages starting at 2pm EST on Thursday and eventually attributed the downtime to a compromise involving an unnamed provider.
-
28 new victims claimed on ransomware leak sites in the last 24 hours
14 active groups. Claims are unverified; victims are not named here.
-
Russian popular home goods chain faces days of disruption following cyberattack
Poryadok, which operates 48 stores across 32 Russian cities, first reported technical problems on Sunday, saying its website, mobile app and physical stores…
-
Critical vulnerability CVE-2025-31704 in Dahua (CVSS 9.8)
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the…
-
Drupal warns of critical Commerce Core flaw exploited in attacks
Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. [...]
-
Binance links $6.3 billion crypto theft to compromised DevOps laptop
Binance, the world's largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer's compromised laptop. [...]
-
Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent…
-
Critical vulnerability CVE-2026-82104 in Teltonika Networks (CVSS 9.4)
In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a…
-
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as…
-
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known…
-
Critical vulnerability CVE-2026-103039 (CVSS 9.8)
The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom…
-
Critical vulnerability CVE-2026-103039 in Gravity Forms (CVSS 9.8)
The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom…
-
28 new victims claimed on ransomware leak sites in the last 24 hours
13 active groups. Claims are unverified; victims are not named here.
-
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets. The world's biggest…
-
Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds
Binance, the world's largest cryptocurrency exchange, confirmed Thursday that it had been hacked in a $6.3 billion cyber heist that blockchain investigators…
-
28 new victims claimed on ransomware leak sites in the last 24 hours
13 active groups. Claims are unverified; victims are not named here.
-
Critical vulnerability CVE-2023-22793 in Veeam (CVSS 9.3)
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization…
-
Binance probes potential $5.8 billion crypto-theft hack
Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest…
-
Hugging Face malware campaign returns to hijack GPUs for crypto mining
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded…
-
Japan Airlines suffers third-party data breach exposing passenger info
Japan Airlines (JAL) has announced that a data breach at Amadeus's Passenger Service System exposed the data of about 92,000 customers. [...]
-
Polymarket halts trading after crypto-draining script breach, $2.5M traced
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute…
-
Critical vulnerability CVE-2026-103093 in Servicenow (CVSS 9.4)
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could…
-
Critical vulnerability CVE-2026-61707 in socfortress (CVSS 9)
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported…
-
Critical vulnerability CVE-2026-61645 in docat-org (CVSS 9.1)
Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the…
Indicative assessment by Blacknote Intelligence, not an official threat level. How the score works.
Archive