Skip to content
Workspace Threat intelligencePublic sources · Local relevance notes

01 / THREAT INTELLIGENCE

Threat Intelligence Desk.

Follow verified vulnerability signals, inspect a specific CVE, and record what still needs checking in your own environment.

CISA KEV records—Checking source…
Newest KEV addition—Checked time pending
NCSC advisory feed—Checking source…
Local product terms0Only in this browser tab
Your entries stay in this tab. No inventory is uploaded to Vanderburgh.it. Close or refresh to clear it; export your notes first. Product-name matches are review prompts, not affected-version or exposure findings.
01 / INVESTIGATE

Broader CVE lookup

Look up any published CVE record at the official CVE Program service. EPSS is a separate 30-day exploitation probability estimate from FIRST.

Enter a CVE to load its published record.

02 / RELEVANCE PROFILE

Check your product terms

Add product or vendor names you are authorized to review. The desk compares these words with CISA KEV labels and asks you to verify affected versions and configuration with the vendor.

    Add a term to review potential matches.

      03 / SOURCE-DATED TIMELINE

      Threat clock

      Recent selected Dutch NCSC security advisories. The feed is curated and does not cover every CVE or provide a geopolitical risk score.

      Loading NCSC advisories…

        Open the official advisory feed ↗
        04 / REVIEWED CASES

        Zero-day tracker

        Historical, source-backed examples where exploitation was reported before a public fix. This is a case register, not a complete or real-time zero-day feed.

        CVE-2024-3400 · PAN-OS GlobalProtect

        Palo Alto Networks published the advisory on 12 April after the issue was discovered in production use. Its first listed fixed release arrived on 14 April. The vendor documents exploitation and affected configurations.

        Vendor advisory and timeline ↗
        CVE-2025-53770 · SharePoint Server

        Microsoft described active attacks on on-premises SharePoint while the July update only partially addressed the vulnerability chain. It subsequently released comprehensive fixes. Confirm the affected product and current update guidance in the vendor advisory.

        Microsoft guidance and timeline ↗

        A KEV entry alone does not prove a vulnerability was a zero-day. Cases here require dated evidence of exploitation and patch availability.

        05 / OBSERVATION SOURCES

        Threat compass

        Explore geographic observations in their original context. Cloudflare Radar measures traffic Cloudflare sees; its locations and mitigations are not a map of all attacks or attribution to an actor.