Ryan Dewhurst

Previdian v1 API and RSS Endpoints Will Be Retired on 18 September

We are deprecating the Previdian v1 API and RSS endpoints. They will be retired on 18 September 2026. Anyone currently using a v1 endpoint should migrate to v2 before this date to avoid disruption. What is changing? The v2 API and RSS feed will become the supported way to access

KEVIntel is becoming Previdian

Today, we’re introducing our new name: Previdian. Over the next two weeks, we’ll transition KEVIntel to the Previdian brand across our website, product, social channels and communications. From 3 September 2026, our new home will be: * Website: previdian.com * X / Twitter: @PrevidianCyber The existing kevintel.com domain will

CVE-2026-0770 Exploited in the Wild: Langflow RCE Added to CISA KEV

KEVIntel first observed remote code execution attempts against Langflow’s code-validation endpoint on 27 June 2026, 24 days before CISA added CVE-2026-0770 to its Known Exploited Vulnerabilities catalog. Between 27 June and 21 July, KEVIntel sensors retained 137 exploitation attempts from 46 unique source IP addresses. The

Critical WordPress wp2shell Vulnerability Allows Unauthenticated Remote Code Execution

Two critical vulnerabilities in WordPress Core, tracked as CVE-2026-63030 and CVE-2026-60137, can be chained to achieve unauthenticated remote code execution. The vulnerability chain, publicly referred to as wp2shell, affects WordPress Core rather than a third-party plugin. An attacker does not require a valid WordPress account,

What Is a Known Exploited Vulnerability (KEV)?

At KEVIntel, a known exploited vulnerability, commonly shortened to KEV, is a vulnerability for which there is credible evidence of real-world exploitation attempts. A CVE identifies a publicly documented vulnerability. KEV intelligence shows that attackers are trying to exploit a vulnerability, sometimes before a CVE has been assigned or