Where else to watch cyber threats
free, no sign-upThe trackers, government feeds and newsrooms we read ourselves. None of them pays to be here, and we are not affiliated with any of them.
Exploited right now
- CISA Known Exploited Vulnerabilitiescisa.gov
The US government list of flaws attackers are using today, with patch deadlines.
- ransomware.liveransomware.live
Tracks ransomware gang leak sites: who claims which victim, by day.
- Exploit-DBexploit-db.com
Public exploit code as it is released.
- Zero Day Initiative advisorieszerodayinitiative.com
Flaws bought and disclosed through ZDI, with vendor status.
Vulnerability counts and data
- CVE Trackercve.0xosprey.com
Published CVEs per month since 1999, daily and cumulative, rebuilt every day from the official list.
- NVD (National Vulnerability Database)nvd.nist.gov
Every CVE with its severity score and affected products.
- FIRST EPSSfirst.org
The daily odds that a given CVE gets exploited in the next 30 days.
- OSVosv.dev
Open source package vulnerabilities across npm, PyPI, Go, Rust and more.
- GitHub Advisory Databasegithub.com
Reviewed advisories for open source packages.
Breaches and your accounts
- Have I Been Pwnedhaveibeenpwned.com
Check whether your email address is in a known breach.
- DataBreaches.netdatabreaches.net
Breach reporting, including the ones that never make the big outlets.
Internet health and outages
- Cloudflare Radarradar.cloudflare.com
Live internet traffic, outages and attack trends by country.
- SANS Internet Storm Centerisc.sans.edu
Daily handler diaries and a threat level run by working defenders.
- Shadowserver dashboarddashboard.shadowserver.org
Exposed and compromised devices seen across the internet.
- abuse.chabuse.ch
Malware and botnet trackers (URLhaus, ThreatFox, Feodo).
Government and CERT alerts
- CISA alerts and advisoriescisa.gov
US alerts, joint advisories and emergency directives.
- UK NCSCncsc.gov.uk
Weekly threat reports and alerts from the UK.
- CERT-EUcert.europa.eu
Advisories for EU institutions, useful for anyone in Europe.
- JPCERT/CCjpcert.or.jp
Japan alerts, often first on Asian campaigns.
News worth following
- BleepingComputerbleepingcomputer.com
Fast, hands-on coverage of attacks and fixes.
- The Recordtherecord.media
Cyber news with a policy and nation-state lens.
- Krebs on Securitykrebsonsecurity.com
Investigations into who is behind the crimes.
- Patch the Planetpatchtheplanet.org
Tracks the open source fixes behind this month's biggest flaws.
Updated Nov 5, 01:42 UTC. Refreshes on its own.