Threat Feeds
Live security intelligence from public security sources
Review update (September 25, 2026): NVD results are a bounded newest-first sample of seven-day Primary CVSS v3 HIGH/CRITICAL records, not all high-severity vulnerabilities or unscored records. Display statistics count the visible capped items. Feodo currently publishes an empty-datasets notice; retained feed records may be old and must not be treated as current C2 confirmation. Check provider timestamps and original sources before acting. Alternate abuse.ch APIs have authentication, fair-use and commercial-use terms.
Featured Threats
Nine Lives Threat Lab
Patch Meow First
A deduplicated CVE queue grouped by evidence-based patch priority. Patch priority is separate from vulnerability severity and does not include a made-up composite score.
- UrgentFull-catalog CISA known exploitation or a CVE-linked public exploit in the bounded Exploit-DB feed
- HighStrong EPSS signal or critical CVSS
- StandardElevated EPSS signal or high CVSS
- MonitorTrack and validate against your environment
Know the limits: This queue covers the current bounded CISA, NVD, Exploit-DB, and GitHub display snapshots—not every vulnerability in your environment. Every displayed CVE is correlated against the full current CISA KEV catalog. EPSS estimates exploitation activity in the next 30 days; it is not environmental risk. These cutoffs are Nine Lives triage rules, not official FIRST categories. CISA known-exploitation evidence or a CVE-linked public exploit takes precedence.
Threat intelligence results
Loading threat intelligence...