https://ba-cybersecurity.com/radar/feed.xml 2026-11-08T14:30:54Z Nobuo Otoi (ba-cybersecurity.com)https://ba-cybersecurity.com/ Counts, tables and classifications: CC BY 4.0. Quoted titles remain with their owners. radar_feed.py tag:ba-cybersecurity.com,2026:php2shell/2026-11-08T14:30:54Z 2026-11-08T14:30:54Z 0 public reports say an attack using CVE-2026-109618 or CVE-2026-109619 succeeded against a real system (as of 8 Nov 2026). 28 reports in total from 27 publishers; 18 describe exploitation attempts only. CISA KEV lists CVE-2026-109618 (added 26 Oct 2026), CVE-2026-109619 (added 26 Oct 2026). Page: https://ba-cybersecurity.com/radar/php2shell/ Data: https://ba-cybersecurity.com/radar/php2shell/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:cve/2026-11-08T04:30:30Z 2026-11-08T04:30:30Z 35 CVEs were added to the CISA Known Exploited Vulnerabilities catalogue in the 30 days to 6 Nov 2026 (7 days: 5). 337 CVEs published in the last 90 days have an EPSS score of 0.9 or more; 3,473 have 0.5 or more. Latest full month (2026-10): 17,052 CVEs published, 36 added to KEV. Page: https://ba-cybersecurity.com/radar/cve/ Data: https://ba-cybersecurity.com/radar/cve/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:ransomware/2026-11-08T03:09:07Z 2026-11-08T03:09:07Z 1,145 leak-site claims worldwide in the 30 days to 7 Nov 2026 (preceding 30 days: 996; 74 groups active). Claims are attacker statements and are not verified. 44 claims first seen on 7 Nov 2026. 57 cases where the victim organisation itself disclosed a ransomware incident are cross-referenced from the Japan and US radars. Page: https://ba-cybersecurity.com/radar/ransomware/ Data: https://ba-cybersecurity.com/radar/ransomware/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:waf/2026-11-08T01:30:14Z 2026-11-08T01:30:14Z 36 public rule updates by 6 WAF vendors in the 30 days to 8 Nov 2026; 17 of 115 exploited CVEs are named by at least one vendor. Page: https://ba-cybersecurity.com/radar/waf/ Data: https://ba-cybersecurity.com/radar/waf/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:us/2026-11-08T01:11:26Z 2026-11-08T01:11:26Z 86 incidents disclosed by US organisations in the 30 days to 7 Nov 2026 (7 days: 16; preceding 30 days: 108). By channel, 30 days: HHS 5, state AGs 61, press 24. Page: https://ba-cybersecurity.com/radar/us/ Data: https://ba-cybersecurity.com/radar/us/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:japan/2026-11-07T23:53:46Z 2026-11-07T23:53:46Z 255 incidents disclosed by organisations in Japan in the 30 days to 8 Nov 2026 (7 days: 75). The organisation's own notice is linked for 89 % of the 30-day incidents. 5 incidents added since the previous update: Rohto Pharmaceutical Co., Ltd. (unauthorised access, 7 Nov 2026); TeamSpirit Inc. (unauthorised access, 7 Nov 2026); JNSA (unauthorised access, 7 Nov 2026). Page: https://ba-cybersecurity.com/radar/ Data: https://ba-cybersecurity.com/radar/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:php2shell/2026-11-07T14:30:46Z 2026-11-07T14:30:46Z 0 public reports say an attack using CVE-2026-109618 or CVE-2026-109619 succeeded against a real system (as of 7 Nov 2026). 28 reports in total from 27 publishers; 18 describe exploitation attempts only. CISA KEV lists CVE-2026-109618 (added 26 Oct 2026), CVE-2026-109619 (added 26 Oct 2026). Page: https://ba-cybersecurity.com/radar/php2shell/ Data: https://ba-cybersecurity.com/radar/php2shell/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:cve/2026-11-07T04:30:48Z 2026-11-07T04:30:48Z 35 CVEs were added to the CISA Known Exploited Vulnerabilities catalogue in the 30 days to 6 Nov 2026 (7 days: 5). 337 CVEs published in the last 90 days have an EPSS score of 0.9 or more; 3,473 have 0.5 or more. Latest full month (2026-10): 17,052 CVEs published, 36 added to KEV. Page: https://ba-cybersecurity.com/radar/cve/ Data: https://ba-cybersecurity.com/radar/cve/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:ransomware/2026-11-07T03:03:24Z 2026-11-07T03:03:24Z 1,127 leak-site claims worldwide in the 30 days to 6 Nov 2026 (preceding 30 days: 991; 75 groups active). Claims are attacker statements and are not verified. 23 claims first seen on 6 Nov 2026. 54 cases where the victim organisation itself disclosed a ransomware incident are cross-referenced from the Japan and US radars. Page: https://ba-cybersecurity.com/radar/ransomware/ Data: https://ba-cybersecurity.com/radar/ransomware/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:php2shell/2026-11-07T02:30:44Z 2026-11-07T02:30:44Z 0 public reports say an attack using CVE-2026-109618 or CVE-2026-109619 succeeded against a real system (as of 7 Nov 2026). 28 reports in total from 27 publishers; 18 describe exploitation attempts only. CISA KEV lists CVE-2026-109618 (added 26 Oct 2026), CVE-2026-109619 (added 26 Oct 2026). Page: https://ba-cybersecurity.com/radar/php2shell/ Data: https://ba-cybersecurity.com/radar/php2shell/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:waf/2026-11-07T01:30:19Z 2026-11-07T01:30:19Z 37 public rule updates by 6 WAF vendors in the 30 days to 7 Nov 2026; 17 of 115 exploited CVEs are named by at least one vendor. 1 update added since the previous update: AWS WAF, 4 Nov 2026: POSIX operating system managed rule group: Released static version 3.3 of this rule group.. Page: https://ba-cybersecurity.com/radar/waf/ Data: https://ba-cybersecurity.com/radar/waf/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:us/2026-11-07T01:12:28Z 2026-11-07T01:12:28Z 89 incidents disclosed by US organisations in the 30 days to 6 Nov 2026 (7 days: 16; preceding 30 days: 107). By channel, 30 days: HHS 8, state AGs 61, press 24. Page: https://ba-cybersecurity.com/radar/us/ Data: https://ba-cybersecurity.com/radar/us/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:japan/2026-11-06T23:53:24Z 2026-11-06T23:53:24Z 250 incidents disclosed by organisations in Japan in the 30 days to 7 Nov 2026 (7 days: 73). The organisation's own notice is linked for 89 % of the 30-day incidents. 9 incidents added since the previous update: Nojima Corporation (data leak, 6 Nov 2026); Saitama Citizen Medical Center (data leak, 6 Nov 2026); NTT DOCOMO (data leak, 6 Nov 2026). Page: https://ba-cybersecurity.com/radar/ Data: https://ba-cybersecurity.com/radar/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:ransomware/2026-11-06T23:05:57Z 2026-11-06T23:05:57Z 1,144 leak-site claims worldwide in the 30 days to 5 Nov 2026 (preceding 30 days: 1,009; 76 groups active). Claims are attacker statements and are not verified. 23 claims first seen on 5 Nov 2026. 54 cases where the victim organisation itself disclosed a ransomware incident are cross-referenced from the Japan and US radars. Page: https://ba-cybersecurity.com/radar/ransomware/ Data: https://ba-cybersecurity.com/radar/ransomware/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:cve/2026-11-06T15:53:50Z 2026-11-06T15:53:50Z 34 CVEs were added to the CISA Known Exploited Vulnerabilities catalogue in the 30 days to 4 Nov 2026 (7 days: 8). 337 CVEs published in the last 90 days have an EPSS score of 0.9 or more; 3,473 have 0.5 or more. Latest full month (2026-10): 17,057 CVEs published, 36 added to KEV. Page: https://ba-cybersecurity.com/radar/cve/ Data: https://ba-cybersecurity.com/radar/cve/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:php2shell/2026-11-06T15:53:24Z 2026-11-06T15:53:24Z 0 public reports say an attack using CVE-2026-109618 or CVE-2026-109619 succeeded against a real system (as of 7 Nov 2026). 28 reports in total from 27 publishers; 18 describe exploitation attempts only. CISA KEV lists CVE-2026-109618 (added 26 Oct 2026), CVE-2026-109619 (added 26 Oct 2026). Page: https://ba-cybersecurity.com/radar/php2shell/ Data: https://ba-cybersecurity.com/radar/php2shell/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:waf/2026-11-06T15:53:24Z 2026-11-06T15:53:24Z 36 public rule updates by 6 WAF vendors in the 30 days to 7 Nov 2026; 17 of 113 exploited CVEs are named by at least one vendor. Page: https://ba-cybersecurity.com/radar/waf/ Data: https://ba-cybersecurity.com/radar/waf/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:us/2026-11-06T15:53:19Z 2026-11-06T15:53:19Z 91 incidents disclosed by US organisations in the 30 days to 5 Nov 2026 (7 days: 23; preceding 30 days: 105). By channel, 30 days: HHS 9, state AGs 62, press 24. Page: https://ba-cybersecurity.com/radar/us/ Data: https://ba-cybersecurity.com/radar/us/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:japan/2026-11-06T15:53:17Z 2026-11-06T15:53:17Z 241 incidents disclosed by organisations in Japan in the 30 days to 7 Nov 2026 (7 days: 64). The organisation's own notice is linked for 90 % of the 30-day incidents. Page: https://ba-cybersecurity.com/radar/ Data: https://ba-cybersecurity.com/radar/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:ransomware/2026-11-06T03:03:18Z 2026-11-06T03:03:18Z 1,144 leak-site claims worldwide in the 30 days to 5 Nov 2026 (preceding 30 days: 1,009; 76 groups active). Claims are attacker statements and are not verified. 23 claims first seen on 5 Nov 2026. 50 cases where the victim organisation itself disclosed a ransomware incident are cross-referenced from the Japan and US radars. Page: https://ba-cybersecurity.com/radar/ransomware/ Data: https://ba-cybersecurity.com/radar/ransomware/data.json Daily records: https://github.com/otoinobuo/ba-radar-data tag:ba-cybersecurity.com,2026:websec/2026-10-31T21:45:23Z 2026-10-31T21:45:23Z Edition 2026-11 (measured 1 Nov 2026): 96 % of finance sites and 100 % of central-government sites have RPKI-valid routes; post-quantum TLS key exchange is offered by 74 % of finance and 90 % of central-government sites. 5,792 sites in 7 sectors, passive measurement of public data only. Page: https://ba-cybersecurity.com/radar/websec/ Data: https://ba-cybersecurity.com/radar/websec/data.json Daily records: https://github.com/otoinobuo/ba-radar-data