Hazard

Hazard · updated today

Two questions, answered with evidence.

Which vulnerabilities are attackers actually using — and what it has cost UK organisations when the answer was ignored. Both halves are built from public data, updated daily, and free to use.

Running Fortinet, Ivanti or Exchange? Build a watchlist and see only what is being exploited in your stack — no account, nothing stored.

1,685 vulnerabilities confirmed exploited
352 used in ransomware campaigns
222 UK enforcement actions on record
£53.48m in penalties issued

Newly confirmed exploited

All 1,685 →

Latest UK enforcement

All 222 →

Cause and consequence

Most sites cover one side or the other. The point of putting them together is that the link is real: the failure modes regulators fine organisations for are the same failure modes attackers rely on.

352 vulnerabilities · 2 UK cases Ransomware, both ends The vulnerabilities ransomware crews exploit, next to what ransomware has cost UK organisations in enforcement. 3 UK cases Unpatched software The most preventable cause on the register — and the exploited CVEs that are already past their fix deadline. 19 sectors Who pays, and for what Every UK sector the ICO has acted against, ranked by total penalties and dominant failure mode. Sister publication The breaches as they break The Perimeter covers cyber-attacks and data breaches daily — the real-world incidents these exploited vulnerabilities cause.