Threat Pulse Index
updated just now0 to 24 Calm, 25 to 44 Elevated, 45 to 64 High, 65 to 84 Severe, 85 to 100 Critical. How it is scored.
Timeline
Heat is severity squared over ten, discounted for confidence. 50-year and 10-year views show landmark events (severity 7+) over the published-CVE count; the past is sampled, this month is not.
Top threat right now
Highest score, last 72 hoursApple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable…
What to do: On the CISA KEV list: patch or mitigate by the due date.
- Brazil: Mercado Bitcoin contains security incident, suspends deposits and withdrawals; about $40M in suspicious transfers flaggedNov 2, 2026 · severity 7 · Active
- Europe: hackers heat supermarket freezers to about 50°C in Sweden, Belgium, Luxembourg, Ireland, Estonia, Netherlands, FinlandNov 2, 2026 · severity 7 · Active
- Japan breach wave: Nojima 7M, Netmile 5.49M, road-service users 5.5M, @cosme 3M, Suntory 100k, Marui with bank account numbersNov 2, 2026 · severity 7 · Active
How the top item is chosen
The highest severity in the last 72 hours wins; open items beat fixed ones; on a tie the newest wins; rumors never lead. If nothing scored in 72 hours, the window widens to 14 days. The editor can pin an item; a pin is always labeled.
New in the last 24 hours
4- Revolve data breach exposed shoppers' saved card numbers and expiration datesNov 4, 09:37 UTC · severity 4
- Crédit Mutuel Arkéa Confirms Cyberattack After ZachXBT Ties It to $133M Crypto TheftNov 4, 03:20 UTC · severity 3
- New cyberattack targets French blood banksNov 4, 03:16 UTC · severity 3
- Cyberattack hits French blood bank site but no blood products were compromisedNov 4, 02:57 UTC · severity 3
Sectors, last 30 days
open items firstOther places to watch
free, no sign-up- CISA Known Exploited VulnerabilitiesExploited right now: The US government list of flaws attackers are using today, with patch deadlines.
- CVE TrackerVulnerability counts and data: Published CVEs per month since 1999, daily and cumulative, rebuilt every day from the official list.
- Have I Been PwnedBreaches and your accounts: Check whether your email address is in a known breach.
- Cloudflare RadarInternet health and outages: Live internet traffic, outages and attack trends by country.
- CISA alerts and advisoriesGovernment and CERT alerts: US alerts, joint advisories and emergency directives.
- BleepingComputerNews worth following: Fast, hands-on coverage of attacks and fixes.
Updated Nov 5, 01:42 UTC. Refreshes on its own.