- Published
- —
- Updated
- —
- KEV
- —
- EPSS
- —
01 / THREAT INTELLIGENCE
Threat Intelligence Desk.
Follow verified vulnerability signals, inspect a specific CVE, and record what still needs checking in your own environment.
Broader CVE lookup
Look up any published CVE record at the official CVE Program service. EPSS is a separate 30-day exploitation probability estimate from FIRST.
Enter a CVE to load its published record.
Check your product terms
Add product or vendor names you are authorized to review. The desk compares these words with CISA KEV labels and asks you to verify affected versions and configuration with the vendor.
Add a term to review potential matches.
Threat clock
Recent selected Dutch NCSC security advisories. The feed is curated and does not cover every CVE or provide a geopolitical risk score.
Loading NCSC advisories…
Zero-day tracker
Historical, source-backed examples where exploitation was reported before a public fix. This is a case register, not a complete or real-time zero-day feed.
Palo Alto Networks published the advisory on 12 April after the issue was discovered in production use. Its first listed fixed release arrived on 14 April. The vendor documents exploitation and affected configurations.
Vendor advisory and timeline ↗Microsoft described active attacks on on-premises SharePoint while the July update only partially addressed the vulnerability chain. It subsequently released comprehensive fixes. Confirm the affected product and current update guidance in the vendor advisory.
Microsoft guidance and timeline ↗A KEV entry alone does not prove a vulnerability was a zero-day. Cases here require dated evidence of exploitation and patch availability.
Threat compass
Explore geographic observations in their original context. Cloudflare Radar measures traffic Cloudflare sees; its locations and mitigations are not a map of all attacks or attribution to an actor.