Skip to content
Ferroscope
Menu

01The atlas

27 incidents.
A very small number of them are yours.

Every file carries its own sources, timeline, affected surfaces, and one honest note about who it can actually reach. The atlas is the dataset, rendered.

27 files12 criticallast disclosure 2026-10-23
27IncidentsAll cited
14In 48 hoursThe cascade
9VectorsDistinct surfaces
0API keysFully offline
27 of 27
criticalWeb server
01

PHP2Shell

A hole in the runtime behind roughly 70% of the web

4 surfacespatched
criticalCertificate authority
02

eMudhra root keys

The keys that prove a website is real were cracked

1 surfacescontained
criticalData breach
03

California student data

Every public school student since 2023, including disability status

0 surfacesactive
criticalHosting
04

Railway

Customer secret keys stolen from a hosting platform

1 surfacesactive
criticalHosting
05

Zeabur

321,810 accounts breached; the company is shutting down

1 surfacesactive
criticalSupply chain
06

LiteLLM

An AI package downloaded 3.4 million times a day, poisoned

1 surfacespatched
criticalWeb server
07

GitLab Onigmo RCE

A 10-out-of-10 hole in every self-managed version since 2014

1 surfacespatched
highState actor
08

Cairn

An AI hacking tool broke into 100+ companies

0 surfacesactive
highRansomware
09

Ahold Delhaize

The owner of Food Lion and Stop & Shop knocked offline

0 surfacesactive
criticalHosting
10

Onamae

Malware planted on up to 26,739 customer servers in Japan

1 surfacesactive
highEndpoint
11

Signal call-state bug

A bug could leave your mic and camera on after you hang up

1 surfacespatched
criticalWeb server
12

NGINX

Three critical holes in software running a third of the web

1 surfacespatched
highNetwork
13

HTTP/3 transport

One connection can crash 7 of 10 tested web servers

5 surfacesactive
highEndpoint
14

Plex Media Server

Attackers are breaking into home media servers

1 surfacesactive
highRansomware
15

SafePay ransomware

The FBI warns of 600+ critical-infrastructure victims

0 surfacesactive
criticalNetwork
16

Palo Alto edge

Ransomware gangs are breaking in through company firewalls

1 surfacespatched
mediumSupply chain
17

Bullhorn

A platform used by 10,000+ companies knocked offline

1 surfacescontained
highData breach
18

Medi-Cal

970,000 patients' data stolen

0 surfacesactive
criticalSupply chain
19

WordPress plugin supply chain

Hackers stole a plugin maker's keys and planted backdoors

2 surfacespatched
criticalSupply chain
20

AOMEI backup updater

Backup software's update server handed out a backdoor

1 surfacescontained
highAI agent
21

Meta Muse

Meta's AI agent exposed users' personal and business secrets

1 surfacesunverified
mediumNetwork
22

Tor exit relays

333 relays hijacked to steal logins

1 surfacescontained
highHosting
23

TiDB Cloud

A database company's cloud was breached

1 surfacesactive
highBanking
24

State Bank of India

India's biggest bank confirms a data breach

1 surfacesactive
highSupply chain
25

OVHcloud tooling

Hackers slipped a password stealer into a cloud company's official tool

1 surfacescontained
highEndpoint
26

Siemens

A software hole being used to spread malware

1 surfacesactive
highState actor
27

North Korean campaign

State hackers launch a new attack campaign on South Korea

0 surfacesactive