Updated Weekly
Weekly Threat Report
29 Mar – 5 Apr 2026 — Real-time threat intelligence from ShieldReport scans.
0
Scans This Week
0 vs last week
0
Total Findings
0
Avg Findings / Scan
0
Critical + High
Risk Breakdown
Critical
0
High
0
Medium
0
Low
0
Pass
0
Top Threats This Week
Missing Content-Security-Policy
Still the #1 finding. Over 70% of scanned sites lack a CSP header, leaving them vulnerable to XSS attacks.
Outdated JavaScript Libraries
jQuery 1.x/2.x and outdated Bootstrap versions with known CVEs remain prevalent across scanned domains.
Open Debug Endpoints
Several sites exposed /debug, /phpinfo, or stack traces — giving attackers full visibility into the tech stack.
Missing DMARC Records
Email spoofing remains trivial for most domains. Attackers can send emails as your domain without DMARC.
Weak TLS Configuration
TLS 1.0/1.1 support and weak cipher suites still found on enterprise domains, enabling downgrade attacks.
Are these threats affecting your site?
Run a free scan and find out in under 10 minutes.
Start Free Scan