Frameworks and taxonomies
| Source | What we take | How often | Terms | How we credit it |
|---|---|---|---|---|
| MITRE ATT&CK | Techniques, tactics, groups, software and their relationships (STIX bundles) | weekly check, upgrade only on owner approval | hereby grants you a non-exclusive, royalty-free license to use ATT&CK® for research, development, and commercial purposes. terms, read 2026-10-14 | © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. |
| MITRE ATLAS | AI attack techniques and tactics | Licensed under the Apache License, Version 2.0 (the "License"); terms, read 2026-10-14 | ©2021-2026 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for Public Release; Distribution Unlimited. | |
| MITRE CWE | Weakness identifiers, names and hierarchy | The MITRE Corporation hereby grants you a non-exclusive, royalty-free license to use CWE … on the condition that you reproduce MITRE's copyright designation terms, read 2026-10-14 | Copyright © 2006–2026, The MITRE Corporation. | |
| MITRE CAPEC | Attack-pattern identifiers, names and CWE links | The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license… terms, read 2026-10-14 | Copyright © 2007–2026, The MITRE Corporation. | |
| MITRE D3FEND | Defensive techniques and their ATT&CK counters | hereby grants you a non-exclusive, royalty-free license to use D3FEND for research, development, and commercial purposes. … reproduce MITRE's copyright designation and this license in any such copy. terms, read 2026-10-14 | © 2025 The MITRE Corporation. | |
| NIST SP 800-53 Rev. 5 | Control identifiers, titles and statements | Works authored by NIST employees are not subject to Copyright protection within the United States terms, read 2026-10-14 | Republished courtesy of the National Institute of Standards and Technology. | |
| NIST Cybersecurity Framework 2.0 | Functions, categories and subcategories | Works authored by NIST employees are not subject to Copyright protection within the United States terms, read 2026-10-14 | Republished courtesy of the National Institute of Standards and Technology. | |
| OWASP Top 10 (web) | Category identifiers, names and CWE lists | © Copyright 2021-2025 - OWASP Top 10 Team - This work is licensed under a Creative Commons Attribution 3.0 Unported License. terms, read 2026-10-14 | OWASP Top 10 Team, CC BY 3.0. | |
| OWASP Top 10 for LLM Applications | Category identifiers and names | Unless otherwise specified, all content on the site is Creative Commons Attribution-ShareAlike v4.0 terms, read 2026-10-14 | OWASP Gen AI Security Project, CC BY-SA 4.0. | |
| OWASP ASVS 5.0 | Requirement identifiers and text | The entire project content is under the Creative Commons Attribution-Share Alike v4.0 license. terms, read 2026-10-14 | OWASP ASVS project, CC BY-SA 4.0. | |
| DISA STIGs | Rule identifiers, titles and CCI links per product | STIGs are works of the U.S. Government published by DISA on the DoD Cyber Exchange; U.S. Government works are not subject to copyright in the United States (17 U.S.C. § 105). Our statement of the statute; source, checked 2026-10-15 | Source: DISA, via DoD Cyber Exchange (public.cyber.mil). | |
| ISO/IEC 27001 and 27002 | Control identifiers and titles for mapping; no standard text is published | All ISO publications and materials are protected by copyright … Any use, including reproduction requires our written permission. terms, read 2026-10-14 | Control identifiers and titles only; no standard text is published; our copy is licensed. |
Also read, listed by name only: CIS AWS Foundations Benchmark.
Vulnerability data
| Source | What we take | How often | Terms | How we credit it |
|---|---|---|---|---|
| FIRST EPSS | Daily exploit-prediction scores per CVE | Scores are generated by Empirical Security and published freely to the community. … Permission to reproduce may be required. terms, terms, read 2026-10-14 | EPSS scores © FIRST.Org, Inc.; published freely to the community; scores shown with the date. | |
| ENISA EU Vulnerability Database | EU vulnerability records and scores | Reproduction of ENISA material published on this website is authorized, provided the source is acknowledged … unless it is stated otherwise. terms, read 2026-10-14 | Source: ENISA EU Vulnerability Database. | |
| Microsoft Security Response Center | Monthly security update releases | Permission to use Documents (such as white papers, press releases, datasheets and FAQs) from the Services is granted … (1) the below copyright notice appears in all copies … for informational and non-commercial or personal use only terms, read 2026-10-14 | We show CVE id, product, severity, release date and the link; advisory text is read at the source. | |
| Adobe security bulletins | Bulletin titles, dates and CVEs | See Terms of Use for additional information and specific use guidelines. terms, read 2026-10-14 | We show bulletin id, affected product, date and the link; text is read at the source. | |
| Oracle Critical Patch Updates | Advisory titles, dates and CVEs | the Materials may be used solely for your personal, informational, noncommercial purposes. … You may not remove, deface, or overprint any notice of copyright terms, read 2026-10-14 | We show advisory id, products, CVE ids, date and the link; text is read at the source. |
3 more sources in this group: we read them, and list them here once their terms are confirmed.
Threat intelligence and incident data
| Source | What we take | How often | Terms | How we credit it |
|---|---|---|---|---|
| ransomware.live | Leak-site claims: group, victim name, date | The Data is freely available for non-commercial use. … Users may utilize the Data without prior approval, provided that appropriate attribution is given to Ransomware.live … Commercial use of the Data is strictly prohibited without prior written approval from the owner of Ransomware.live. terms, read 2026-10-14 | Data © Ransomware.live, used under its grant conditions (owner, on file). | |
| ENISA Threat Landscape | Report findings | Reproduction of ENISA material published on this website is authorized, provided the source is acknowledged … unless it is stated otherwise. terms, read 2026-10-14 | Source: ENISA Threat Landscape; reproduction authorised with acknowledgement. | |
| UK NCSC | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | UK NCSC |
| CERT-EU security advisories | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | CERT-EU security advisories |
| CISA cybersecurity advisories | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | CISA cybersecurity advisories |
| CISA ICS advisories | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | CISA ICS advisories |
| CERT-Bund (BSI) advisories | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | CERT-Bund (BSI) advisories |
| Australian Cyber Security Centre alerts | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Australian Cyber Security Centre alerts |
| Australian Cyber Security Centre advisories | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Australian Cyber Security Centre advisories |
| JPCERT/CC | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | JPCERT/CC |
| JPCERT/CC blog | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | JPCERT/CC blog |
| AusCERT bulletins | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | AusCERT bulletins |
| HKCERT security bulletins | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | HKCERT security bulletins |
| GovCERT.HK security alerts | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | GovCERT.HK security alerts |
| Canadian Centre for Cyber Security | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Canadian Centre for Cyber Security |
| Palo Alto Networks Unit 42 | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Palo Alto Networks Unit 42 |
| Cisco Talos | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Cisco Talos |
| Microsoft Security blog | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Microsoft Security blog |
| ESET WeLiveSecurity | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | ESET WeLiveSecurity |
| Sophos X-Ops | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Sophos X-Ops |
| Check Point Research | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Check Point Research |
| SentinelLabs | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | SentinelLabs |
| Volexity | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Volexity |
| Sygnia | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Sygnia |
| Binarly | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Binarly |
| CrowdStrike blog | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | CrowdStrike blog |
| Rapid7 blog | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Rapid7 blog |
| Cloudflare blog | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Cloudflare blog |
| Google Threat Intelligence (Mandiant) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Google Threat Intelligence (Mandiant) |
| Multiplier (Substack) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Multiplier (Substack) |
| Barracuda blog | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Barracuda blog |
| Dragos | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Dragos |
| FortiGuard Labs | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | FortiGuard Labs |
| Group-IB | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Group-IB |
| SonicWall | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | SonicWall |
| Thales | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Thales |
| Trellix Research | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Trellix Research |
| Trend Micro Research | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Trend Micro Research |
1 more source in this group: we read it, and list it here once its terms are confirmed.
News and press
| Source | What we take | How often | Terms | How we credit it |
|---|---|---|---|---|
| DataBreaches.net | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | DataBreaches.net |
| The Hill (technology) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The Hill (technology) |
| Politico | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Politico |
| Politico (cybersecurity) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Politico (cybersecurity) |
| Transformer | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Transformer |
| The Epoch Times (US) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The Epoch Times (US) |
| CNN (via Bing News search) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | CNN (via Bing News search) |
| The New York Times (technology) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The New York Times (technology) |
| The Wall Street Journal (technology) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The Wall Street Journal (technology) |
| BBC News (technology) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | BBC News (technology) |
| Krebs on Security | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Krebs on Security |
| BleepingComputer | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | BleepingComputer |
| The Record | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The Record |
| SecurityWeek | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | SecurityWeek |
| The Hacker News | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The Hacker News |
| Dark Reading | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Dark Reading |
| CyberScoop | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | CyberScoop |
| Help Net Security | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Help Net Security |
| The Register (security) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The Register (security) |
| Infosecurity Magazine | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Infosecurity Magazine |
| Hackread | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Hackread |
| TechCrunch (security) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | TechCrunch (security) |
| TechCrunch (AI) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | TechCrunch (AI) |
| iTnews (Australia) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | iTnews (Australia) |
| Taipei Times | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Taipei Times |
| CNA (Singapore) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | CNA (Singapore) |
| The Straits Times (technology) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The Straits Times (technology) |
| Kyodo News (English) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Kyodo News (English) |
| The Mainichi (English) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The Mainichi (English) |
| The420.in | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The420.in |
| The Economic Times (technology) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The Economic Times (technology) |
| Australian Cyber Security Magazine | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Australian Cyber Security Magazine |
| Stuff (New Zealand) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Stuff (New Zealand) |
| Hindustan Times | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Hindustan Times |
| The Sydney Morning Herald (technology) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The Sydney Morning Herald (technology) |
| Observer (technology) | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Observer (technology) |
Legal and regulatory records
| Source | What we take | How often | Terms | How we credit it |
|---|---|---|---|---|
| SEC EDGAR Form 8-K filings | Item 1.05 cybersecurity-incident disclosures | one request per news-engine poll, with a User-Agent carrying a contact (SEC asks for at most 10 a second) | Information presented on sec.gov is considered public information and may be copied or further distributed by users of the web site without the SEC's permission. … All Government-created content on sec.gov and EDGAR public filing content are free to access and reuse. terms, terms, read 2026-10-14 | Source: SEC EDGAR. |
| US Department of Justice press releases | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | US Department of Justice press releases |
| Europol newsroom | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Europol newsroom |
| The White House news | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | The White House news |
| Federal Register executive orders | Headline, link, date and the feed's summary | every news-engine poll | Public feed; we show the publisher's name and a link to the item; the story is read at the source. | Federal Register executive orders |
2 more sources in this group: we read them, and list them here once their terms are confirmed.
Our own
| Source | What we take | How often | Terms | How we credit it |
|---|---|---|---|---|
| Security Resilience annotations and crosswalks | Our AI categorisation, framework mappings and grades | Our own work. | Security Resilience. | |
| Items sent to our inbox | Counted, never named | Our own work. | Security Resilience. | |
| Reports sent to our report desk | Counted, never named | Our own work. | Security Resilience. | |
| Links our editors submit | Headline and link of the submitted page | Our own work. | Security Resilience. |