ervik.as
Free · Live · No Signup Required

Real-Time Cyber
Threat Intelligence

The same live CVE, zero-day, and ransomware data enterprise platforms charge for — free, with no account and no paywall. Updated continuously, not on a delay.

CVEs, zero-days, ransomware campaigns, threat actors, OT/ICS advisories, and global attack activity from a single platform.

Subscribe via RSS — get every update the moment it's published
Global Cyber Threat Intelligence
Live intelligence from
0+
CVEs
0+
Threat Actors
0
Active Zero Days
0+
Ransomware Victims
Updated every 15 minutes · running totals tracked since this dashboard went live
Attacks Today
89,270
top 20 DShield sources
New CVEs (7d)
300
0 critical
Active 0-Days (30d)
45
CISA KEV catalog
Ransomware Victims (7d)
252
leak-site disclosures
Loading latest security news…

Global Threat Map

Live attack telemetry from the SANS ISC DShield sensor network.

Open full map

Latest CVEs

Newly disclosed vulnerabilities ranked by exploitability.

Full database
CVE-2026-89266high · 8.2

stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation size is truncated fro…

stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation size is truncated from size_t to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes or heap corruption.

· · 9/12/2026
CVE-2026-90461medium · 6.3

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) B…

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.

· · 9/11/2026
CVE-2026-90460none ·

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 credentials, applicat…

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 credentials, application credentials, OAuth1 access tokens, and trusts) are not blocked from creating, modifying, or deleting credentials via the /v3/credentials API. EC2-derived tokens can additionally read credential blobs, exposing TOTP MFA seeds and other secrets. Also, PATCH /v3/credentials does not validate the requested post-update project_id, allowing any delegated token to move a credential to an unauthorized project. All Keystone deployments using delegated authentication are affected.

· · 9/11/2026
CVE-2026-90457none ·

The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, a…

The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing algorithm used for the same password on another authentication path. A party able to read this file, including a local user or a party with access to a configuration backup, could feasibly recover the underlying password through offline computation, compromising the administrative credential across every path that accepts it.

· · 9/11/2026

OT & ICS Security

Industrial control system advisories from CISA's official CSAF repository.

All advisories

Refresh warning: Cache write failed: Error: Too many subrequests by single Worker invocation. To configure this limit, refer to https://developers.cloudflare.com/workers/wrangler/configuration/#limits — showing cached data.

No OT advisories currently cached.

Active Zero-Days

Vulnerabilities being weaponized before patches are available.

All zero-days
CVE-2026-42016actively exploited

JFrog Artifactory Incorrect Authorization Vulnerability

JFrog Artifactory contains an incorrect authorization vulnerability that allows leads to privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

JFrog Artifactory
CVE-2026-42018actively exploited

JFrog Artifactory Improper Authentication Vulnerability

JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.

JFrog Artifactory
CVE-2026-84869actively exploited

ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to file transfer and execution through an active remote sessions without authorization or host confirmation.

ConnectWise ScreenConnect

Latest Ransomware Victims

Fresh victim disclosures from active ransomware campaigns.

All victims
securotrop2026-09-12

Shelco Filters

Status: AWAITING Size: 191 GB

US
safepay2026-09-11

compunnel.com

The company provides a combination of talent acquisition, IT consulting, digital engineering, artificial intelligence, cybersecurity, and workforce management services to …

US
qilin2026-09-11

Imperial Healthcare Solutions

N/A

US
nightspire2026-09-11

DiamondLease

[AI generated] N/A

AE
nightspire2026-09-11

Perimetral Oriental de Bogotá S.A.S.

- Customers' Interior Designs- Many Departments Internal Documents

CO
nightspire2026-09-11

Ozel & Ozel Laws Office

Data is not available now.

TR

Threat Intel Briefings

Active campaigns from tracked actors over the last 72 hours.

All briefings
threatfox-1913095Remusbotnet cc — http://teculse.click:9210/commentsOpportunistic / untargetedGlobal9/12/2026
threatfox-1913096Remusbotnet cc — http://arqtsop.shop:9932/accountsOpportunistic / untargetedGlobal9/12/2026
threatfox-1913097Remusbotnet cc — http://trwehop.shop:5627/subscriptionsOpportunistic / untargetedGlobal9/12/2026
threatfox-1913094Bashlitepayload — 671d7db9ea9bc33168e51c97c52d3ff9e8f4c596dcbbd224ef4a1b6e3939ca8fOpportunistic / untargetedGlobal9/12/2026
threatfox-1913092Miraipayload — b145c4512a72ff02c951da3b3d57273c3a9404f4fb691ccaa2750e6bb65f0a6fOpportunistic / untargetedGlobal9/12/2026
Advertisement