{
 "generated": "2026-10-23T17:31:50Z",
 "sources": {
  "geo": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:21Z",
   "count": 1,
   "release": "2026-10",
   "detail": "Self-check matched the expected countries."
  },
  "feodo": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:21Z",
   "entries": 5,
   "count": 5,
   "retained": false
  },
  "kev": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:21Z",
   "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
   "catalogVersion": "2026.10.21",
   "dateReleased": "2026-10-21T14:04:39.8983Z",
   "count": 1754,
   "retained": false
  },
  "cisaCyber": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:21Z",
   "items": 10,
   "count": 10,
   "retained": false
  },
  "attack": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:21Z",
   "mappedCves": 419,
   "kevVersion": "07/28/2025",
   "attackVersion": "16.1",
   "count": 419,
   "retained": false
  },
  "cisaIcs": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:21Z",
   "items": 30,
   "count": 30,
   "retained": false
  },
  "php": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:21Z",
   "cves": 2,
   "versions": 4,
   "count": 2,
   "retained": false
  },
  "nsa": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:22Z",
   "items": 20,
   "count": 20,
   "retained": false
  },
  "threatfox": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:23Z",
   "count": 11805,
   "iocs": 11805,
   "unmapped": 0,
   "notIp": 10224,
   "retained": false
  },
  "nvd": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:36Z",
   "window": [
    "2026-10-16T17:31:20Z",
    "2026-10-23T17:31:20Z"
   ],
   "count": 78,
   "retained": false
  },
  "d3fend": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:37Z",
   "version": "1.6.0",
   "release": "2026-08-31T00:12:00Z",
   "techniques": 12,
   "answered": 12,
   "count": 12,
   "unmapped": 1,
   "failed": [],
   "retained": false
  },
  "nvdCve": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:50Z",
   "found": [
    "CVE-2026-109618",
    "CVE-2026-109619"
   ],
   "missed": []
  },
  "epss": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:50Z",
   "scoreDate": "2026-10-23",
   "scored": 112,
   "count": 112,
   "retained": false
  },
  "epssSeries": {
   "ok": true,
   "status": "fresh",
   "tried": "2026-10-23T17:31:50Z",
   "scoreDate": "2026-10-23",
   "scored": 21,
   "count": 21,
   "retained": false
  }
 },
 "kev": {
  "catalog": 1754,
  "added30": 33,
  "ransomKnown": 361,
  "ransom30": 0,
  "catalogVersion": "2026.10.21"
 },
 "exploitedNow": [
  {
   "cve": "CVE-2026-96656",
   "dateAdded": "2026-10-20",
   "dueDate": "2026-10-23",
   "ransomware": "Unknown",
   "epss": 0.00816,
   "percentile": 0.56677
  },
  {
   "cve": "CVE-2026-96655",
   "dateAdded": "2026-10-20",
   "dueDate": "2026-11-03",
   "ransomware": "Unknown",
   "epss": 0.00455,
   "percentile": 0.3856
  },
  {
   "cve": "CVE-2026-96654",
   "dateAdded": "2026-10-20",
   "dueDate": "2026-10-23",
   "ransomware": "Unknown",
   "epss": 0.00465,
   "percentile": 0.39325
  },
  {
   "cve": "CVE-2026-96652",
   "dateAdded": "2026-10-20",
   "dueDate": "2026-11-03",
   "ransomware": "Unknown",
   "epss": 0.00455,
   "percentile": 0.38559
  },
  {
   "cve": "CVE-2026-110936",
   "dateAdded": "2026-10-20",
   "dueDate": "2026-11-03",
   "ransomware": "Unknown",
   "epss": 0.00238,
   "percentile": 0.14021
  },
  {
   "cve": "CVE-2026-106931",
   "dateAdded": "2026-10-20",
   "dueDate": "2026-10-23",
   "ransomware": "Unknown",
   "epss": 0.0117,
   "percentile": 0.67173
  },
  {
   "cve": "CVE-2026-102764",
   "dateAdded": "2026-10-16",
   "dueDate": "2026-10-19",
   "ransomware": "Unknown",
   "epss": 0.0118,
   "percentile": 0.67457
  },
  {
   "cve": "CVE-2025-61624",
   "dateAdded": "2026-10-16",
   "dueDate": "2026-10-19",
   "ransomware": "Unknown",
   "epss": 0.01081,
   "percentile": 0.64866
  },
  {
   "cve": "CVE-2026-21589",
   "dateAdded": "2026-10-15",
   "dueDate": "2026-10-18",
   "ransomware": "Unknown",
   "epss": 0.12711,
   "percentile": 0.96263
  },
  {
   "cve": "CVE-2026-76519",
   "dateAdded": "2026-10-14",
   "dueDate": "2026-10-17",
   "ransomware": "Unknown",
   "epss": 0.01573,
   "percentile": 0.75231
  },
  {
   "cve": "CVE-2026-105134",
   "dateAdded": "2026-10-14",
   "dueDate": "2026-10-17",
   "ransomware": "Unknown",
   "epss": 0.3831,
   "percentile": 0.98568
  },
  {
   "cve": "CVE-2026-105133",
   "dateAdded": "2026-10-14",
   "dueDate": "2026-10-17",
   "ransomware": "Unknown",
   "epss": 0.05794,
   "percentile": 0.93098
  }
 ],
 "topRisk": [
  {
   "cve": "CVE-2015-3306",
   "epss": 0.99497,
   "epss7dAgo": 0.99497,
   "inKev": true
  },
  {
   "cve": "CVE-2015-5477",
   "epss": 0.99409,
   "epss7dAgo": 0.99409,
   "inKev": true
  },
  {
   "cve": "CVE-2016-3081",
   "epss": 0.96052,
   "epss7dAgo": 0.96052,
   "inKev": true
  },
  {
   "cve": "CVE-2026-71362",
   "epss": 0.87507,
   "epss7dAgo": 0.87507,
   "inKev": true
  },
  {
   "cve": "CVE-2026-87902",
   "epss": 0.39979,
   "epss7dAgo": 0.39979,
   "inKev": true
  },
  {
   "cve": "CVE-2026-105134",
   "epss": 0.3831,
   "epss7dAgo": 0.04782,
   "inKev": true
  },
  {
   "cve": "CVE-2026-104935",
   "epss": 0.25982,
   "epss7dAgo": 0.25982,
   "inKev": true
  },
  {
   "cve": "CVE-2021-3199",
   "epss": 0.20136,
   "epss7dAgo": 0.19352,
   "inKev": true
  }
 ],
 "newCritical": [
  {
   "cve": "CVE-2026-97785",
   "published": "2026-10-22T22:20:13.483",
   "cvss": {
    "version": "3.1",
    "score": 10,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.00598
  },
  {
   "cve": "CVE-2026-83938",
   "published": "2026-10-22T22:19:18.540",
   "cvss": {
    "version": "3.1",
    "score": 10,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.00668
  },
  {
   "cve": "CVE-2026-115384",
   "published": "2026-10-22T19:17:45.543",
   "cvss": {
    "version": "3.1",
    "score": 9.9,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.00312
  },
  {
   "cve": "CVE-2026-115377",
   "published": "2026-10-22T19:17:44.460",
   "cvss": {
    "version": "3.1",
    "score": 9.9,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.00405
  },
  {
   "cve": "CVE-2026-115375",
   "published": "2026-10-22T19:17:44.133",
   "cvss": {
    "version": "3.1",
    "score": 9.9,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.00405
  },
  {
   "cve": "CVE-2022-51026",
   "published": "2026-10-22T19:17:30.883",
   "cvss": {
    "version": "3.1",
    "score": 9.8,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.00613
  },
  {
   "cve": "CVE-2022-51022",
   "published": "2026-10-22T11:17:05.153",
   "cvss": {
    "version": "3.1",
    "score": 9.1,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.00794
  },
  {
   "cve": "CVE-2021-48016",
   "published": "2026-10-22T11:17:04.690",
   "cvss": {
    "version": "3.1",
    "score": 9.8,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.00441
  },
  {
   "cve": "CVE-2021-48014",
   "published": "2026-10-22T11:17:04.390",
   "cvss": {
    "version": "3.1",
    "score": 9.8,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.01669
  },
  {
   "cve": "CVE-2026-114575",
   "published": "2026-10-22T01:16:58.533",
   "cvss": {
    "version": "3.1",
    "score": 10,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.0221
  },
  {
   "cve": "CVE-2026-114383",
   "published": "2026-10-21T22:16:49.077",
   "cvss": {
    "version": "3.1",
    "score": 10,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.00653
  },
  {
   "cve": "CVE-2026-114382",
   "published": "2026-10-21T22:16:48.910",
   "cvss": {
    "version": "3.1",
    "score": 10,
    "severity": "CRITICAL"
   },
   "inKev": false,
   "epss": 0.00667
  }
 ],
 "feodo": {
  "entries": 5,
  "online": 1,
  "families": {
   "Emotet": 1,
   "QakBot": 4
  },
  "lastOnline": "2026-03-12",
  "activeByCountry": {
   "US": 1
  }
 },
 "threatfox": {
  "total": 11805,
  "families": {
   "php.shin_webshell": 248,
   "AMOS": 1315,
   "ClearFake": 412,
   "StrelaStealer": 322,
   "XMRIG": 18,
   "RedTail": 15,
   "Unknown malware": 672,
   "VShell": 329,
   "SmartLoader": 27,
   "SalatStealer": 62,
   "Cobalt Strike": 97,
   "Vidar": 2242,
   "WARDENStealer": 89,
   "Mirai": 1395,
   "Venus Stealer": 54,
   "MoriAgent": 15,
   "Agent Tesla": 22,
   "WannaCryptor": 24,
   "NetWire RC": 24,
   "ExoBot": 3,
   "Luca Stealer": 11,
   "stealler": 30,
   "DCRat": 21,
   "PY#RATION": 9,
   "ValleyRAT": 50,
   "Raven Stealer": 76,
   "Formbook": 62,
   "CodeCore": 9,
   "AsyncRAT": 73,
   "Akira Stealer": 3,
   "Creal Stealer": 9,
   "XWorm": 32,
   "Remcos": 133,
   "Hermes": 60,
   "RevStealer": 7,
   "Mozi": 61,
   "Stealc": 1,
   "Quasar RAT": 25,
   "Remus": 240,
   "Sliver": 86,
   "Potassium": 19,
   "PureRAT": 122,
   "AdaptixC2": 37,
   "Chaos": 11,
   "Brute Ratel C4": 1,
   "Aisuru": 45,
   "TonRAT": 11,
   "Unknown Loader": 773,
   "Unknown RAT": 63,
   "IClickFix": 1393,
   "Unknown Stealer": 72,
   "SNOWLIGHT": 3,
   "UrlZone": 1,
   "Kaiji": 8,
   "Bashlite": 20,
   "BlackMatter": 1,
   "Coinminer": 229,
   "Lumma Stealer": 1,
   "SmartApeSG": 27,
   "VIP Keylogger": 10,
   "Ghost RAT": 4,
   "ShadowPad": 3,
   "Havoc": 15,
   "Evilginx": 9,
   "CLOUDHAZE": 44,
   "Nimplant": 1,
   "OtterCandy": 16,
   "NetSupportManager RAT": 2,
   "RN Stealer": 29,
   "MASS Logger": 10,
   "Shim RAT": 6,
   "CrossRAT": 23,
   "LxBase RAT": 1,
   "Eye Pyramid": 1,
   "DanaBot": 1,
   "Drifter": 4,
   "Tofsee": 31,
   "GlassWorm": 4,
   "BeaverTail": 2,
   "FAKEUPDATES": 2,
   "Chisel": 1,
   "NjRAT": 23,
   "MacSync": 38,
   "NonEuclid RAT": 1,
   "Xtreme RAT": 9,
   "DarkComet": 1,
   "SectopRAT": 7,
   "Hupigon": 1,
   "Nanocore RAT": 13,
   "Tsundere": 10,
   "BianLian": 1,
   "Prometei": 24,
   "RatonRAT": 4,
   "lampion": 6,
   "Kuiper": 6,
   "Loki": 3,
   "xmrig": 1,
   "Coruna": 35,
   "GHOSTBLADE": 11,
   "Hades": 2,
   "Loki Password Stealer (PWS)": 1,
   "ACR Stealer": 4,
   "KongTuke": 2,
   "donut_injector": 1,
   "Ngioweb": 1,
   "XOR DDoS": 1,
   "MooBot": 2,
   "Flame": 1,
   "ElectroRAT": 3,
   "QuantLoader": 9,
   "Elevator": 3,
   "QuirkyLoader": 3,
   "Phorpiex": 3,
   "Supper": 6,
   "GCleaner": 9,
   "Ramsay": 3,
   "DarkCloud Stealer": 3,
   "m0yv": 3,
   "SMSspy": 27,
   "CloudEyE": 1,
   "Predator": 1,
   "RomulusLoader": 3,
   "Antidot": 5,
   "Amadey": 4,
   "GUIDLOADER": 3,
   "RedCurl": 3,
   "VoltStealer": 3,
   "FoalShell": 1,
   "Alien": 1,
   "Rozena": 1,
   "Gravity RAT": 1,
   "CECbot": 1,
   "DBoxAgent": 3,
   "DeerStealer": 44,
   "Expiro": 1,
   "GammaLoad": 1,
   "Jackskid": 5,
   "P2Pinfect": 1,
   "AndroRAT": 1,
   "SpyNote": 1
  },
  "perDay": {
   "2026-10-23": 1169,
   "2026-10-22": 1859,
   "2026-10-21": 2420,
   "2026-10-20": 1914,
   "2026-10-19": 1064,
   "2026-10-18": 1522,
   "2026-10-17": 1475,
   "2026-10-16": 382
  },
  "c2": {
   "HK": 317,
   "NL": 76,
   "SE": 26,
   "CN": 118,
   "JP": 27,
   "US": 244,
   "LT": 8,
   "BO": 1,
   "BG": 5,
   "TR": 42,
   "LV": 3,
   "FI": 12,
   "BE": 7,
   "CH": 10,
   "DE": 127,
   "RU": 34,
   "PL": 6,
   "SI": 24,
   "FR": 38,
   "CO": 13,
   "PA": 16,
   "MU": 6,
   "SG": 49,
   "ZA": 2,
   "MD": 5,
   "GB": 40,
   "AU": 15,
   "EE": 5,
   "CA": 21,
   "AR": 4,
   "RO": 10,
   "SC": 12,
   "BR": 8,
   "MA": 3,
   "CZ": 2,
   "UA": 1,
   "TH": 36,
   "VN": 9,
   "TW": 14,
   "IR": 2,
   "KR": 3,
   "AE": 2,
   "SA": 9,
   "MX": 4,
   "IN": 7,
   "EG": 2,
   "IL": 2,
   "KE": 9,
   "IT": 5,
   "ID": 4,
   "RS": 1,
   "HU": 4,
   "MY": 3,
   "PH": 2,
   "LK": 1,
   "NO": 1,
   "GR": 1
  },
  "malware": {
   "FR": 5,
   "NL": 19,
   "CH": 1,
   "PK": 35,
   "AR": 7,
   "US": 18,
   "DE": 5,
   "CN": 8,
   "IN": 3,
   "FI": 2,
   "BR": 4,
   "SG": 1,
   "ZA": 1,
   "ET": 1,
   "JP": 1,
   "GB": 5,
   "TR": 1,
   "XK": 5,
   "TH": 1
  },
  "unmapped": 0,
  "notIp": 10224
 },
 "attack": {
  "top": [
   {
    "id": "T1059",
    "name": "Command and Scripting Interpreter",
    "n": 170,
    "d3fend": [
     "D3-CF",
     "D3-CM",
     "D3-CQ",
     "D3-DA",
     "D3-DF",
     "D3-EAL",
     "D3-EDL",
     "D3-EFA",
     "D3-FA",
     "D3-FE",
     "D3-FEV",
     "D3-FIM",
     "D3-LFP",
     "D3-RF",
     "D3-RFAM"
    ]
   },
   {
    "id": "T1190",
    "name": "Exploit Public-Facing Application",
    "n": 157,
    "d3fend": [
     "D3-APCA",
     "D3-DQSA",
     "D3-ISVA",
     "D3-ITF",
     "D3-NTCD",
     "D3-NTF",
     "D3-NTSA",
     "D3-PMAD",
     "D3-PSEP",
     "D3-RTSD",
     "D3-SAOR",
     "D3-UGLPA"
    ]
   },
   {
    "id": "T1068",
    "name": "Exploitation for Privilege Escalation",
    "n": 69,
    "d3fend": [
     "D3-MBT",
     "D3-PCSV",
     "D3-PSEP",
     "D3-SAOR",
     "D3-SFCV",
     "D3-SSC"
    ]
   },
   {
    "id": "T1005",
    "name": "Data from Local System",
    "n": 46,
    "d3fend": [
     "D3-CF",
     "D3-CM",
     "D3-CQ",
     "D3-DF",
     "D3-FA",
     "D3-FE",
     "D3-FEV",
     "D3-FIM",
     "D3-LFP",
     "D3-RF",
     "D3-RFAM"
    ]
   },
   {
    "id": "T1078",
    "name": "Valid Accounts",
    "n": 46,
    "d3fend": [
     "D3-AA",
     "D3-AL",
     "D3-AM",
     "D3-CDP",
     "D3-DAM",
     "D3-LAM",
     "D3-RUAA",
     "D3-UAP",
     "D3-ULA"
    ]
   },
   {
    "id": "T1203",
    "name": "Exploitation for Client Execution",
    "n": 43,
    "d3fend": [
     "D3-MBT",
     "D3-PCSV",
     "D3-PSEP",
     "D3-SAOR",
     "D3-SFCV",
     "D3-SSC"
    ]
   },
   {
    "id": "T1105",
    "name": "Ingress Tool Transfer",
    "n": 35,
    "d3fend": [
     "D3-APCA",
     "D3-NTCD",
     "D3-NTF",
     "D3-NTSA",
     "D3-OTF",
     "D3-PMAD",
     "D3-RPA",
     "D3-RTSD",
     "D3-UGLPA"
    ]
   },
   {
    "id": "T1204.002",
    "name": "Malicious File",
    "n": 33,
    "d3fend": [
     "D3-CF",
     "D3-CM",
     "D3-CQ",
     "D3-DA",
     "D3-DF",
     "D3-EAL",
     "D3-EDL",
     "D3-EFA",
     "D3-FA",
     "D3-FE",
     "D3-FEV",
     "D3-FIM",
     "D3-LFP",
     "D3-RF",
     "D3-RFAM"
    ]
   },
   {
    "id": "T1505.003",
    "name": "Web Shell",
    "n": 26,
    "d3fend": [
     "D3-CF",
     "D3-CM",
     "D3-CQ",
     "D3-DA",
     "D3-DF",
     "D3-EAL",
     "D3-EDL",
     "D3-EFA",
     "D3-EHB",
     "D3-FA",
     "D3-FE",
     "D3-FEV",
     "D3-FIM",
     "D3-HR",
     "D3-HS",
     "D3-LFP",
     "D3-LLM",
     "D3-NNI",
     "D3-PLA",
     "D3-PLM",
     "D3-PS",
     "D3-PSA",
     "D3-PT",
     "D3-RF",
     "D3-RFAM",
     "D3-RNA",
     "D3-SCF"
    ]
   },
   {
    "id": "T1133",
    "name": "External Remote Services",
    "n": 25,
    "d3fend": [
     "D3-ST"
    ]
   },
   {
    "id": "T1189",
    "name": "Drive-by Compromise",
    "n": 21,
    "d3fend": [
     "D3-APCA",
     "D3-HD",
     "D3-IAA",
     "D3-NTCD",
     "D3-NTF",
     "D3-NTSA",
     "D3-PMAD",
     "D3-PSEP",
     "D3-RTSD",
     "D3-SAOR",
     "D3-UA",
     "D3-UGLPA",
     "D3-URA"
    ]
   },
   {
    "id": "T1496",
    "name": "Resource Hijacking",
    "n": 19,
    "d3fend": []
   }
  ],
  "mappedCves": 419,
  "kevVersion": "07/28/2025",
  "attackVersion": "16.1",
  "d3fendVersion": "1.6.0"
 },
 "advisories": {
  "cyberCount": 10,
  "icsCount": 30,
  "featured": {
   "code": "AA26-231A",
   "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-231a",
   "release": "2026-08-19T12:00:00Z",
   "agencies": [
    "NSA",
    "CISA",
    "FBI",
    "DOE",
    "EPA"
   ],
   "ot": true
  },
  "breaking": {
   "url": "https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4630238/nsa-advisory-critical-patches-recommended-for-php-vulnerabilities/",
   "pub": "2026-10-21T14:08:00Z",
   "phpUrl": "https://www.php.net/archive/2026.php#2026-10-21-5",
   "phpPublished": "2026-10-21T00:35:26Z",
   "versions": [
    "8.5.12",
    "8.4.27",
    "8.3.36",
    "8.2.35"
   ],
   "cves": [
    {
     "cve": "CVE-2026-109618",
     "inKev": false,
     "inCritical": true,
     "inTop": false,
     "epss": 0.1162,
     "percentile": 0.96047,
     "cvss31": {
      "version": "3.1",
      "score": 9.8,
      "severity": "CRITICAL"
     },
     "cvss40": {
      "version": "4.0",
      "score": 9.2,
      "severity": "CRITICAL"
     },
     "ranges": [
      {
       "start": "7.3.0",
       "end": "8.2.35"
      },
      {
       "start": "8.3.0",
       "end": "8.3.36"
      },
      {
       "start": "8.4.0",
       "end": "8.4.27"
      },
      {
       "start": "8.5.0",
       "end": "8.5.12"
      },
      {
       "start": "10.2.0",
       "end": "10.2.7"
      },
      {
       "start": "11.1.0",
       "end": "11.1.4"
      },
      {
       "start": "11.2.0",
       "end": "11.2.4"
      },
      {
       "start": "12.1.0",
       "end": "12.1.4"
      },
      {
       "start": "12.2.0",
       "end": "12.2.4"
      }
     ]
    },
    {
     "cve": "CVE-2026-109619",
     "inKev": false,
     "inCritical": false,
     "inTop": false,
     "epss": 0.05991,
     "percentile": 0.933,
     "cvss31": {
      "version": "3.1",
      "score": 8.1,
      "severity": "HIGH"
     },
     "cvss40": {
      "version": "4.0",
      "score": 9.2,
      "severity": "CRITICAL"
     },
     "ranges": [
      {
       "start": "5.4.0",
       "end": "8.2.35"
      },
      {
       "start": "8.3.0",
       "end": "8.3.36"
      },
      {
       "start": "8.4.0",
       "end": "8.4.27"
      },
      {
       "start": "8.5.0",
       "end": "8.5.12"
      },
      {
       "start": "10.2.0",
       "end": "10.2.7"
      },
      {
       "start": "11.1.0",
       "end": "11.1.4"
      },
      {
       "start": "11.2.0",
       "end": "11.2.4"
      },
      {
       "start": "12.1.0",
       "end": "12.1.4"
      },
      {
       "start": "12.2.0",
       "end": "12.2.4"
      }
     ]
    }
   ]
  },
  "nsaCount": 20,
  "nsaShown": 5,
  "items": [
   {
    "code": "AA26-293A",
    "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-293a",
    "feed": "cyber",
    "pub": "2026-10-19T19:18:07Z",
    "agencies": [
     "CISA"
    ],
    "ot": false
   },
   {
    "code": "AA26-281A",
    "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a",
    "feed": "cyber",
    "pub": "2026-10-06T16:22:53Z",
    "agencies": [
     "CISA"
    ],
    "ot": false
   },
   {
    "code": "AA26-251A",
    "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a",
    "feed": "cyber",
    "pub": "2026-09-04T16:12:28Z",
    "agencies": [
     "CISA"
    ],
    "ot": false
   },
   {
    "code": "AA26-237A",
    "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-237a",
    "feed": "cyber",
    "pub": "2026-08-20T16:32:14Z",
    "agencies": [
     "CISA"
    ],
    "ot": false
   },
   {
    "code": "AA26-231A",
    "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-231a",
    "feed": "cyber",
    "pub": "2026-08-14T20:06:03Z",
    "agencies": [
     "NSA",
     "CISA",
     "FBI",
     "DOE",
     "EPA"
    ],
    "ot": true
   },
   {
    "code": "AA26-222A",
    "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-222a",
    "feed": "cyber",
    "pub": "2026-08-05T12:27:56Z",
    "agencies": [
     "CISA"
    ],
    "ot": false
   },
   {
    "code": "AA26-204A",
    "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-204a",
    "feed": "cyber",
    "pub": "2026-07-21T19:08:02Z",
    "agencies": [
     "CISA"
    ],
    "ot": false
   },
   {
    "code": "AA26-194A",
    "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-194a",
    "feed": "cyber",
    "pub": "2026-07-08T18:43:49Z",
    "agencies": [
     "CISA"
    ],
    "ot": false
   },
   {
    "code": "AA26-113A",
    "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-113a",
    "feed": "cyber",
    "pub": "2026-04-21T15:12:37Z",
    "agencies": [
     "CISA"
    ],
    "ot": false
   },
   {
    "code": "AA26-097A",
    "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-097a",
    "feed": "cyber",
    "pub": "2026-04-06T11:03:58Z",
    "agencies": [
     "CISA"
    ],
    "ot": true
   },
   {
    "code": "ICSA-26-295-11",
    "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11",
    "feed": "ics",
    "pub": "2026-10-22T12:00:00Z",
    "agencies": [
     "CISA"
    ],
    "ot": true
   },
   {
    "code": "ICSA-26-295-01",
    "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01",
    "feed": "ics",
    "pub": "2026-10-22T12:00:00Z",
    "agencies": [
     "CISA"
    ],
    "ot": true
   },
   {
    "code": "ICSA-26-295-02",
    "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02",
    "feed": "ics",
    "pub": "2026-10-22T12:00:00Z",
    "agencies": [
     "CISA"
    ],
    "ot": true
   },
   {
    "code": "ICSA-26-295-03",
    "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03",
    "feed": "ics",
    "pub": "2026-10-22T12:00:00Z",
    "agencies": [
     "CISA"
    ],
    "ot": true
   },
   {
    "code": "ICSA-26-295-04",
    "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04",
    "feed": "ics",
    "pub": "2026-10-22T12:00:00Z",
    "agencies": [
     "CISA"
    ],
    "ot": true
   },
   {
    "code": "ICSA-26-295-05",
    "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05",
    "feed": "ics",
    "pub": "2026-10-22T12:00:00Z",
    "agencies": [
     "CISA"
    ],
    "ot": true
   },
   {
    "code": "ICSA-26-295-06",
    "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06",
    "feed": "ics",
    "pub": "2026-10-22T12:00:00Z",
    "agencies": [
     "CISA"
    ],
    "ot": true
   },
   {
    "code": "ICSA-26-295-07",
    "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07",
    "feed": "ics",
    "pub": "2026-10-22T12:00:00Z",
    "agencies": [
     "CISA"
    ],
    "ot": true
   },
   {
    "code": "NSA-ADVISORY-CRITICAL-PATCHES-RECOMMENDED-FOR-PHP-VULNERABILITIES",
    "url": "https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4630238/nsa-advisory-critical-patches-recommended-for-php-vulnerabilities/",
    "feed": "nsa",
    "pub": "2026-10-21T14:08:00Z",
    "agencies": [
     "NSA"
    ],
    "ot": false
   },
   {
    "code": "NSA-AND-OTHERS-ADVISE-ORGANIZATIONS-WITH-PRACTICES-TO-PREPARE-FOR-AND-MANAGE-SU",
    "url": "https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4629045/nsa-and-others-advise-organizations-with-practices-to-prepare-for-and-manage-su/",
    "feed": "nsa",
    "pub": "2026-10-20T10:19:00Z",
    "agencies": [
     "NSA"
    ],
    "ot": false
   },
   {
    "code": "NSA-JOINS-FBI-AND-OTHERS-TO-PROVIDE-GUIDANCE-TO-MITIGATE-CHINESE-GOVERNMENT-LIN",
    "url": "https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4622576/nsa-joins-fbi-and-others-to-provide-guidance-to-mitigate-chinese-government-lin/",
    "feed": "nsa",
    "pub": "2026-10-08T18:08:00Z",
    "agencies": [
     "NSA"
    ],
    "ot": false
   },
   {
    "code": "NSA-RELEASES-ZERO-TRUST-GUIDANCE-FOR-PROTECTING-OPERATIONAL-TECHNOLOGY-SYSTEMS",
    "url": "https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4621936/nsa-releases-zero-trust-guidance-for-protecting-operational-technology-systems/",
    "feed": "nsa",
    "pub": "2026-10-08T12:06:00Z",
    "agencies": [
     "NSA"
    ],
    "ot": true
   },
   {
    "code": "NSA-ANNOUNCES-POST-QUANTUM-CRYPTOGRAPHY-MEASURES-TO-SAFEGUARD-NATIONAL-SECURITY",
    "url": "https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4615285/nsa-announces-post-quantum-cryptography-measures-to-safeguard-national-security/",
    "feed": "nsa",
    "pub": "2026-10-01T15:11:21Z",
    "agencies": [
     "NSA"
    ],
    "ot": false
   }
  ]
 },
 "feed": [
  {
   "source": "abuse.ch ThreatFox",
   "at": "2026-10-23T16:57:40Z",
   "href": "https://threatfox.abuse.ch/ioc/1982215/",
   "label": "REPORTED",
   "kind": "malware"
  },
  {
   "source": "abuse.ch ThreatFox",
   "at": "2026-10-23T16:57:40Z",
   "href": "https://threatfox.abuse.ch/ioc/1982213/",
   "label": "REPORTED",
   "kind": "c2"
  },
  {
   "source": "abuse.ch ThreatFox",
   "at": "2026-10-23T16:57:39Z",
   "href": "https://threatfox.abuse.ch/ioc/1982217/",
   "label": "REPORTED",
   "kind": "malware"
  },
  {
   "source": "abuse.ch ThreatFox",
   "at": "2026-10-23T16:57:39Z",
   "href": "https://threatfox.abuse.ch/ioc/1982216/",
   "label": "REPORTED",
   "kind": "malware"
  },
  {
   "source": "EPSS by FIRST",
   "at": "2026-10-23",
   "href": "https://nvd.nist.gov/vuln/detail/CVE-2026-105134",
   "label": "ESTIMATE",
   "kind": "epss"
  },
  {
   "source": "CISA ICS advisories",
   "at": "2026-10-22T12:00:00Z",
   "href": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11",
   "label": "VERIFIED",
   "kind": "advisory"
  },
  {
   "source": "CISA ICS advisories",
   "at": "2026-10-22T12:00:00Z",
   "href": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01",
   "label": "VERIFIED",
   "kind": "advisory"
  },
  {
   "source": "CISA KEV",
   "at": "2026-10-20",
   "href": "https://nvd.nist.gov/vuln/detail/CVE-2026-96656",
   "label": "VERIFIED",
   "kind": "kev"
  },
  {
   "source": "CISA KEV",
   "at": "2026-10-20",
   "href": "https://nvd.nist.gov/vuln/detail/CVE-2026-96655",
   "label": "VERIFIED",
   "kind": "kev"
  },
  {
   "source": "CISA KEV",
   "at": "2026-10-20",
   "href": "https://nvd.nist.gov/vuln/detail/CVE-2026-96654",
   "label": "VERIFIED",
   "kind": "kev"
  },
  {
   "source": "CISA KEV",
   "at": "2026-10-20",
   "href": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652",
   "label": "VERIFIED",
   "kind": "kev"
  },
  {
   "source": "CISA KEV",
   "at": "2026-10-20",
   "href": "https://nvd.nist.gov/vuln/detail/CVE-2026-110936",
   "label": "VERIFIED",
   "kind": "kev"
  },
  {
   "source": "CISA KEV",
   "at": "2026-10-20",
   "href": "https://nvd.nist.gov/vuln/detail/CVE-2026-106931",
   "label": "VERIFIED",
   "kind": "kev"
  },
  {
   "source": "CISA cybersecurity advisories",
   "at": "2026-10-19T19:18:07Z",
   "href": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-293a",
   "label": "VERIFIED",
   "kind": "advisory"
  }
 ],
 "map": {
  "c2": {
   "HK": 317,
   "NL": 76,
   "SE": 26,
   "CN": 118,
   "JP": 27,
   "US": 244,
   "LT": 8,
   "BO": 1,
   "BG": 5,
   "TR": 42,
   "LV": 3,
   "FI": 12,
   "BE": 7,
   "CH": 10,
   "DE": 127,
   "RU": 34,
   "PL": 6,
   "SI": 24,
   "FR": 38,
   "CO": 13,
   "PA": 16,
   "MU": 6,
   "SG": 49,
   "ZA": 2,
   "MD": 5,
   "GB": 40,
   "AU": 15,
   "EE": 5,
   "CA": 21,
   "AR": 4,
   "RO": 10,
   "SC": 12,
   "BR": 8,
   "MA": 3,
   "CZ": 2,
   "UA": 1,
   "TH": 36,
   "VN": 9,
   "TW": 14,
   "IR": 2,
   "KR": 3,
   "AE": 2,
   "SA": 9,
   "MX": 4,
   "IN": 7,
   "EG": 2,
   "IL": 2,
   "KE": 9,
   "IT": 5,
   "ID": 4,
   "RS": 1,
   "HU": 4,
   "MY": 3,
   "PH": 2,
   "LK": 1,
   "NO": 1,
   "GR": 1
  },
  "malware": {
   "FR": 5,
   "NL": 19,
   "CH": 1,
   "PK": 35,
   "AR": 7,
   "US": 18,
   "DE": 5,
   "CN": 8,
   "IN": 3,
   "FI": 2,
   "BR": 4,
   "SG": 1,
   "ZA": 1,
   "ET": 1,
   "JP": 1,
   "GB": 5,
   "TR": 1,
   "XK": 5,
   "TH": 1
  },
  "feodo": {
   "US": 1
  },
  "unmapped": 0,
  "notIp": 10224
 },
 "sourceHealth": {
  "healthy": 11,
  "total": 11,
  "sources": [
   {
    "id": "kev",
    "status": "fresh",
    "count": 1754
   },
   {
    "id": "epss",
    "status": "fresh",
    "count": 112
   },
   {
    "id": "nvd",
    "status": "fresh",
    "count": 78
   },
   {
    "id": "cisaCyber",
    "status": "fresh",
    "count": 10
   },
   {
    "id": "cisaIcs",
    "status": "fresh",
    "count": 30
   },
   {
    "id": "nsa",
    "status": "fresh",
    "count": 20
   },
   {
    "id": "threatfox",
    "status": "fresh",
    "count": 11805
   },
   {
    "id": "feodo",
    "status": "fresh",
    "count": 5
   },
   {
    "id": "attack",
    "status": "fresh",
    "count": 419
   },
   {
    "id": "d3fend",
    "status": "fresh",
    "count": 12
   },
   {
    "id": "geo",
    "status": "fresh",
    "count": 1
   }
  ]
 }
}
