Download the latest Vulnerability & Exploitation Report

Download now

CrowdSec Partners

Find the closest partner depending on your location and benefit from immediate support.

Filter your research

by region :

by SECTOR :

Interested in becoming a CrowdSec Partner?

Learn more

Related resources

Patch order example: the BeyondTrust remote support RCE ranks first with a CrowdSec Score of 9, ahead of Log4Shell, which has a CVSS of 10 but a CrowdSec Score of 3.
Proactive Cybersecurity

How to prioritise CVEs by real exploitation, beyond CVSS, EPSS and KEV

CVSS, EPSS and KEV estimate risk. To prioritise patching, check if a CVE is exploited now, how targeted it is and whether it’s growing. A practical method.

CrowdSec WAF virtual patching: a shield blocks PHP2Shell exploit attempts while visitors reach web applications behind NGINX, OpenResty, HAProxy and Traefik
Tutorial

PHP2Shell Virtual Patching: Keep Your PHP Websites Online While You Upgrade

PHP2Shell virtual patching: free CrowdSec WAF rules block known exploits for both CVEs, so your PHP sites stay online while you upgrade. How to set it up.

Bar chart: of 332 exploited CVEs tracked from Q4 2024 to Q2 2026, 36% were attacked within a day of publication, 27% within 2 to 7 days and 22% within 8 to 30 days
Proactive Cybersecurity

What 300,000 Security Engines saw: 8 lessons on exploitation from SANS 2026

36% of exploited CVEs were attacked within a day of publication. What 300,000 Security Engines saw at SANS 2026: borrowed cloud IPs, early zero-days, old CVEs.