Cyber threats recorded today
This page lists cyber threats recorded in the last 24 hours: vulnerabilities confirmed to be under active exploitation from CISA's Known Exploited Vulnerabilities catalogue, and active malware campaigns from abuse.ch ThreatFox, each linked to its authoritative record.
40 recorded · updated every 5–15 min · 3 sources
Recorded in the last 24 hours
- L3 · threat campaign · threatfox Vidar: 51 aktif gösterge (24s)
- L2 · threat campaign · threatfox php.shin_webshell: 28 aktif gösterge (24s)
- L4 · threat campaign · threatfox ClearFake: 411 aktif gösterge (24s)
- L2 · threat campaign · threatfox Jackskid: 11 aktif gösterge (24s)
- L2 · threat campaign · threatfox Remus: 14 aktif gösterge (24s)
- L2 · threat campaign · threatfox Cobalt Strike: 10 aktif gösterge (24s)
- L3 · threat campaign · threatfox Unknown malware: 64 aktif gösterge (24s)
- L2 · threat campaign · threatfox AsyncRAT: 16 aktif gösterge (24s)
- L1 · threat campaign · threatfox PureRAT: 4 aktif gösterge (24s)
- L1 · threat campaign · threatfox GovRAT: 3 aktif gösterge (24s)
- L1 · threat campaign · threatfox Sliver: 3 aktif gösterge (24s)
- L2 · threat campaign · threatfox ValleyRAT: 12 aktif gösterge (24s)
- L2 · threat campaign · threatfox Formbook: 27 aktif gösterge (24s)
- L1 · threat campaign · threatfox MASS Logger: 3 aktif gösterge (24s)
- L2 · threat campaign · threatfox NjRAT: 6 aktif gösterge (24s)
- L2 · threat campaign · threatfox Coinminer: 15 aktif gösterge (24s)
- L2 · threat campaign · threatfox CrossRAT: 9 aktif gösterge (24s)
- L1 · threat campaign · threatfox ZStealer: 3 aktif gösterge (24s)
- L3 · threat campaign · threatfox NetWire RC: 33 aktif gösterge (24s)
- L2 · threat campaign · threatfox SalatStealer: 10 aktif gösterge (24s)
- L1 · threat campaign · threatfox BitRAT: 3 aktif gösterge (24s)
- L1 · threat campaign · threatfox Vilsa Stealer: 3 aktif gösterge (24s)
- L1 · threat campaign · threatfox HijackLoader: 4 aktif gösterge (24s)
- L1 · threat campaign · threatfox GCleaner: 3 aktif gösterge (24s)
- L1 · threat campaign · threatfox Venus Stealer: 3 aktif gösterge (24s)
- L1 · threat campaign · threatfox Overlord RAT: 3 aktif gösterge (24s)
- L2 · threat campaign · threatfox stealler: 9 aktif gösterge (24s)
- L2 · threat campaign · threatfox Nanocore RAT: 9 aktif gösterge (24s)
- L2 · threat campaign · threatfox AdaptixC2: 8 aktif gösterge (24s)
- L2 · threat campaign · threatfox Phorpiex: 9 aktif gösterge (24s)
- L1 · threat campaign · threatfox Tofsee: 3 aktif gösterge (24s)
- L2 · threat campaign · threatfox WannaCryptor: 12 aktif gösterge (24s)
- L2 · threat campaign · threatfox Creal Stealer: 6 aktif gösterge (24s)
- L1 · threat campaign · threatfox Shim RAT: 3 aktif gösterge (24s)
- L2 · threat campaign · threatfox RN Stealer: 9 aktif gösterge (24s)
- L2 · threat campaign · threatfox XWorm: 11 aktif gösterge (24s)
- L2 · threat campaign · threatfox ACR Stealer: 15 aktif gösterge (24s)
- L1 · threat campaign · threatfox VIP Keylogger: 3 aktif gösterge (24s)
- L1 · threat campaign · threatfox Agent Tesla: 3 aktif gösterge (24s)
- L1 · threat campaign · threatfox QuirkyLoader: 3 aktif gösterge (24s)
Only what is actually being exploited
CISA's KEV catalogue is deliberately narrow: it lists only vulnerabilities with confirmed active exploitation, which makes it far more actionable than the full CVE firehose. Each entry links to its authoritative NIST National Vulnerability Database record.
No attack map animation
There are no arcing missiles between countries here. Those visualisations are almost always decorative, and the underlying data rarely supports the geography they imply. Cyber events appear as list items with their identifier and a link to the authoritative record.
Sources behind this page
All 13 data sources →Questions
Where does the cyber data come from?
CISA's Known Exploited Vulnerabilities catalogue, the NIST National Vulnerability Database for CVE records, and abuse.ch ThreatFox for active malware campaigns.
Is the data free to access?
Yes. CISA KEV and NIST NVD are public United States government resources, and ThreatFox is published under a CC0 licence.