Who targets whom

Threat actors (rows) against the vendors whose products their attributed CVEs target (columns). Each cell counts the CVEs one actor targets at one vendor; shading marks how recent that activity is.

Attribution is deliberately sparse — this matrix covers 70 actors and 55 vendors across 220 actor→vendor pairs (285 CVE links). It shows the 40 most-attributed actors and the 20 most-targeted vendors; empty cells mean no attributed CVE links that pair, not "safe". See how attribution is built and the full actor catalogue.