Questions and answers
Answers you can quote. The numbers come from our research and update with the data.
What is CISA’s Known Exploited Vulnerabilities list?
It is the catalogue of vulnerabilities that the US Cybersecurity and Infrastructure Security Agency (CISA) has evidence attackers have used in real attacks. It listed 1,769 vulnerabilities as of 6 November 2026. US federal agencies must fix each one by a set date; everyone else can use it to decide what to patch first.
How many vulnerabilities are known to be exploited?
CISA’s Known Exploited Vulnerabilities (KEV) catalogue lists 1,769 vulnerabilities with evidence of exploitation in real attacks, as of 6 November 2026.
Which vendor has the most known exploited vulnerabilities?
Microsoft has the most entries on CISA’s KEV list: 390 of 1,769 (22%), followed by Cisco (102) and Apple (96).
How many vulnerabilities has CISA added to the KEV list in 2026?
CISA added 285 vulnerabilities to the KEV list in 2026 up to 6 November 2026, more than the 216 it had added by the same date in 2025 (245 in all of 2025).
Is RedTeamDaily free?
Yes. RedTeamDaily is free to read on the website and in the iPhone and Android apps, with no paywall. It is paid for by readers’ donations, clearly labelled sponsors and the Teams plan for companies.
How does RedTeamDaily write its stories?
Each story groups the reports of several security outlets on the same event. An AI writes the summary from those reports only, it is checked against them, and every story links to its original sources. Mistakes are fixed in public on the corrections page.
How many sources does RedTeamDaily read?
RedTeamDaily reads 122 feeds from government agencies, vendors, security researchers and news outlets, and links to every original article.