| / | Search the feed |
| R | Refresh now |
| 1–6 | Switch views |
| Esc | Clear search or close a dialog |
| ? | Show this help |
How severity is scored
Each report gets a 0–100 score from what it describes (zero-day, active exploitation, ransomware, supply chain, nation-state activity) and from the CVEs it mentions (CISA KEV status, CVSS from NVD, exploit probability from EPSS). Hover a severity label to see the reasons.
Related stories
Reports that share a CVE or have closely matching headlines within 72 hours are grouped. Turn grouping off in the feed filters to see every report separately.
KEV due dates
Due dates are the remediation deadlines CISA sets for US federal civilian agencies. They are a useful urgency signal for everyone else.