Security Resilience

Threats

Who is attacking, what they exploit, and how we know — 370 threat actors tracked, 420 CVEs attributed to the actors that exploit them.

Last updated: 16 October 2026 10:19 UTC

Act

Today's briefthe day's signal decomposed into to-dos — filter, check off, exportIn the newsadvisories, KEV adds, and SEC filings from the last 14 daysNewly attributedfresh CVE→actor attributions, evidence-linkedCVE→actor lookupwhich actors exploit a given CVE

Explore

Threat actors370 tracked groups, filterable by sponsor and activityCompare actorsside-by-side TTPs, targets, and timelinesENISA Threat Landscapethe European view of the threat pictureEU vs NVD severitywhere European CSIRTs rate differentlyEUVD criticalswhat ENISA rates critical right nowCERT directorynational & international response teams, by regionAsia-Pacific landscapeAPAC incident-reporting law, JPCERT feed, regional CERTsGlobal threat reportsmajor intl threat & vuln reports by region, + our analysesAttributed CVEs (research)the raw CVE→actor attribution corpusSimilarity graphwho operates like whom, by technique and victim overlapActor × vendor heatmapwhich actors target which vendors, shaded by recencyCampaignsnamed operations mapped to actors and CVEsIncidentsmaterial breaches and intrusions, monthly cadenceIndustrial espionageIP-theft actors and their beneficiaries

Understand

What is actually being exploited?KEV additions, publication→exploitation lag, and EPSS pressure over timeThreat mappingactors mapped to ATT&CK techniques and controlsMethodologyhow attribution and actor synthesis work here

Read

Open datasetthe actor catalog as downloadable JSONAll articles
Newly attributed — CVE→actormost recent

Recent news — Threats

All news · RSS feed