Live threat intelligence
Trending Cyber Threats
What attackers are doing right now, from open-source intelligence feeds.
Ransomware attacks, actively exploited vulnerabilities, and the most attacked network ports — aggregated from public threat feeds, refreshed automatically, and filterable by country, threat group, sector, and time range.
LIVE
Connecting to feeds…
—Ransomware attacks
—Active threat groups
—New exploited CVEs
—Fresh malware IOCs
—Live malware URLs
—Most attacked port
Attacks over time
View data table
Top threat groups
Click a slice to filterView data table
Most targeted countries
Click a bar to filterView data table
Global attack sensor traffic
Global · SANS ISC honeypot network, last 30 daysView data table
Trending malware families
Global · ThreatFox fresh IOCsView data table
Active malware distribution
Global · URLhaus online URLsView data table
Most attacked ports
Global · SANS ISC sensorsView data table
Actively exploited vulnerabilities
Global · CISA KEVView data table
Live threat feed
Data sources: ransomware.live · RansomLook · CISA KEV · SANS Internet Storm Center · ThreatFox · URLhaus. Feeds cache server-side and the dashboard auto-refreshes every 5 minutes.