DEFENSIVE INTELLIGENCE · OPEN SOURCES
Know what
needs attention.
Vulnerabilities. Vendors. The stories behind them.
A source-led view for patching priorities and situational awareness. No scanners, exploits or private data.
CVEs in the headlines.
Ranked by distinct RSS publishers naming the CVE in a headline or RSS summary. Coverage is a signal, not a measure of exploitation or risk.
Vendor signals.
Unique CVEs per vendor across KEV additions in the past 30 days and the recent NVD sample. No market-share adjustment; not an attack count.
New to the KEV catalogue.
The date added is when CISA catalogued the vulnerability, not when it was first disclosed or first exploited. Federal remediation due dates are not universal deadlines.
Recent high & critical CVEs.
High/critical CVSS v3/v4 scores among at most the 250 most recently published records in the last seven days. Not exhaustive; unscored records are excluded.
Security headlines.
- Loading RSS headlines…
Titles, dates and links only. Publisher content stays with the publisher; related and syndicated stories may overlap.
Every signal has a source.
What this view leaves out
Shodan needs an API key and is not connected. No exploit code, attack tooling, asset scanning or private threat intelligence. This page cannot establish whether your systems are affected.
NVD is accessed without a key, with requests spaced at least 8 seconds apart within each scheduled collection. A server cron refreshes the snapshot every 3 hours (00:00, 03:00… UTC). Browser reloads never trigger provider requests. Last successful source fetches and unavailable sources are labelled; an overdue snapshot is marked stale.
This product uses the NVD API but is not endorsed or certified by the NVD. CISA KEV and advisory information is attributed to CISA. Follow vendor guidance and verify applicability before acting.