Intelligence Hub
Not a link farm. A read on what the week's exploited vulnerabilities and reporting actually mean, and which of them should change what you do.
Get This AssessedIntelligence Briefing
CISA's catalogue of actively exploited vulnerabilities now holds 1,766 entries, with 10 added in the last seven days. 10 of the newest entries carry a federal remediation deadline inside the next fortnight, which is a reasonable yardstick for how fast the rest of us should be moving. Across 18 stories from 4 sources, the dominant theme is Actively exploited flaws. Recent additions cluster around Ivanti, PHP Group, GitLab.
Put together on 30 October 2026 from the US government’s official list of security flaws known to be under attack, plus the security reporting our analysts read each day. It updates on its own, so this page is current whenever you visit.
The numbers behind it, in plain terms
Themes We Are Seeing
Ranked by how often each subject came up across this week’s newly exploited flaws and the reporting we track. Each one links through to the Palette team that handles it.
Vendors in the latest catalogue additions
- Ivanti ×2
- PHP Group ×2
- GitLab
- Cisco
- Broadcom
What To Do About It
Check the catalogue against your inventory
The question is not whether these are serious — it is whether you run them. Most organisations cannot answer that quickly, and that gap is the real exposure.
Managed Security ServicesPressure-test your position on Actively exploited flaws
Reading about it is not the same as knowing how your own estate would hold up against it.
Penetration TestingPressure-test your position on Edge & network devices
Reading about it is not the same as knowing how your own estate would hold up against it.
Network & InfrastructureTurn this into a prioritised plan
A briefing is only useful if it changes what you do next. We scope, test and hand back an ordered list with owners.
Cyber ConsultingWant this against your own estate, not the internet’s?
The same analysis is far more useful when it runs against your inventory. Tell us what you have and we will tell you which of these actually reach you.
Frameworks & Databases
Book a Consultation
Tell us what is keeping you up at night — an audit deadline, a cloud migration, a board asking hard questions. We will tell you honestly whether we can help, and what it takes.
What happens next
- 1You send us the detail — a short message, or the intake form if the engagement is already taking shape.
- 2We reply within one business day, and tell you honestly if we are not the right fit.
- 3A scoping call, then a fixed-price proposal covering the work, the reporting and the retest.