—:—:— UTC

Overview Ransomware CVEs Defacements Breaches Countries

Unified threat intelligence across ransomware, CVEs, and defacements — pivot by country, actor, or source.

Platform

Overview
Ransomware
CVEs
Defacements
Breaches
Countries

Product

API keys
TAXII 2.1 / STIX 2.1
Integrations
Reports
Pricing

About

Report an issue
Privacy
Terms

© 2026 HackerFeeds·Open-source threat-intel aggregator

Overview

Threat intelligence, unified.

All feeds nominal·last sync 1h ago

Ransomware Incidents

28,930

Top actor:Icarus

vs previous periodView all

Defacements

521

Top notifier:Antonkill

vs previous periodView all

CVEs (last 30d)

7,806

Top severity:high

vs previous periodView all

Last 24 Hours

167

Breakdown:13 RW · 61 DF · 93 CVE

vs previous 24hView all

Global threat map

Composite risk by country — hover for breakdown, click to drill in

Last 30 days

Risk

Low → High

Top countries by risk

Composite score across all sources

🇦🇪
United Arab Emiratesscore 100
rw161df0
🇦🇷
Argentinascore 100
rw155df2
🇦🇹
Austriascore 100
rw128df0
🇦🇺
Australiascore 100
rw481df2
🏳️
BDscore 100
rw25df0
🇧🇪
Belgiumscore 100
rw166df0
🏳️
BGscore 100
rw35df0
🇧🇷
Brazilscore 100
rw487df102

Threat timeline

Daily activity across sources•1,136 events (8,822 incl. hidden) in last 30d•Click legend chip to toggle

Most active this week

Top actors by source — click to drill in

7d window

Ransomware groups

01Icarus9
02qilin7
03nova5
04akira5
05aurora5

Defacement notifiers

01Antonkill14
02Trenggalek Cyber Army4
03CoupDeGrace4
04Mr. BDKR283
05Umbrella Gang3

CISA KEV vendors

01Microsoft377
02Apple93
03Cisco92
04Adobe79
05Google72

Pro Console

Stop chasing alerts. Route them.

Build watchlists by vendor, CVSS, ransomware group or country. Pipe matches to Slack, PagerDuty, Splunk, Sentinel, XSOAR — or pull raw via API & TAXII 2.1.

Unlock Pro Console See plans

Custom feeds

Watchlists, dedupe, enrichment

Integrations

Slack, PagerDuty, SIEM

API + TAXII

JSON, STIX 2.1, raw archive

Live Activity

Latest events across ransomware, CVEs and defacements — interleaved by recency

12:28:04
RANSOMWARE
transvill.com.pe hit by novadHJhbnN2aWxsLmNvbS5wZUBub3Zh·by nova·medium1h
11:53:47
RANSOMWARE
alejandria.biz hit by novaYWxlamFuZHJpYS5iaXpAbm92YQ==·by nova·medium2h
11:26:06
RANSOMWARE
Cash Canada hit by qilinQ2FzaCBDYW5hZGFAcWlsaW4=·by qilin·medium2h
09:54:06
RANSOMWARE
lpgroup.pt hit by novabHBncm91cC5wdEBub3Zh·by nova·medium4h
08:16:24
CVE
CVE-2026-7761: The Ultimate Member plugin for WordPress is vulnerable to Account Takeover via Password Reset Link Disclosure in all ver…CVE-2026-7761·by NVD·high5h
08:16:24
CVE
CVE-2026-56052: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel B…CVE-2026-56052·by NVD·high5h
08:16:24
CVE
CVE-2026-52942: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_log: validate MAC header was set befo…CVE-2026-52942·by NVD·unknown5h
08:16:24
CVE
CVE-2026-52941: In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid NULL deref of conn->lnk in smc_msg_e…CVE-2026-52941·by NVD·unknown5h
08:16:24
CVE
CVE-2026-52940: In the Linux kernel, the following vulnerability has been resolved: tun: zero the whole vnet header in tun_put_user() …CVE-2026-52940·by NVD·unknown5h
08:16:24
CVE
CVE-2026-52939: In the Linux kernel, the following vulnerability has been resolved: net/rds: fix NULL deref in rds_ib_send_cqe_handler(…CVE-2026-52939·by NVD·unknown5h
08:16:24
CVE
CVE-2026-52938: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpf_sk_storage…CVE-2026-52938·by NVD·unknown5h
08:16:23
CVE
CVE-2026-52937: In the Linux kernel, the following vulnerability has been resolved: tap: fix stack info leak in tap_ioctl() SIOCGIFHWAD…CVE-2026-52937·by NVD·unknown5h

08:16:23
CVE
CVE-2026-52936: In the Linux kernel, the following vulnerability has been resolved: crypto: jitterentropy - replace long-held spinlock …CVE-2026-52936·by NVD·unknown5h
08:16:23
CVE
CVE-2026-52935: In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: do not reuse an in-progress partial…CVE-2026-52935·by NVD·unknown5h
08:16:23
CVE
CVE-2026-52934: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tvlv: reject oversized TVLV packets ba…CVE-2026-52934·by NVD·unknown5h
08:16:23
CVE
CVE-2026-52933: In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: fix signed comparison in io_poll_get…CVE-2026-52933·by NVD·unknown5h
08:16:23
CVE
CVE-2026-52932: In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp error…CVE-2026-52932·by NVD·unknown5h
08:16:23
CVE
CVE-2026-52931: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid use of uninit sender va…CVE-2026-52931·by NVD·unknown5h
08:16:23
CVE
CVE-2026-52930: In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shm_nattch u…CVE-2026-52930·by NVD·unknown5h
08:16:23
CVE
CVE-2026-52929: In the Linux kernel, the following vulnerability has been resolved: sctp: stream: fully roll back denied add-stream sta…CVE-2026-52929·by NVD·unknown5h
08:16:22
CVE
CVE-2026-52928: In the Linux kernel, the following vulnerability has been resolved: af_unix: Reject SIOCATMARK on non-stream sockets S…CVE-2026-52928·by NVD·unknown5h
08:16:22
CVE
CVE-2026-52927: In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix OOB read in compat_mtw_fro…CVE-2026-52927·by NVD·unknown5h
08:16:22
CVE
CVE-2026-52926: In the Linux kernel, the following vulnerability has been resolved: batman-adv: clear current gateway during teardown …CVE-2026-52926·by NVD·unknown5h
08:16:22
CVE
CVE-2026-52925: In the Linux kernel, the following vulnerability has been resolved: vrf: Fix a potential NPD when removing a port from …CVE-2026-52925·by NVD·unknown5h

Showing 24 of 60View full feed

Breach by HackerFeeds

25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Billions of leaked recordsThousands of sources monitoredDaily dark-web crawls

Claim 25% off Try free tier

CyberSecurity news

Live from BleepingComputer, Krebs, The Hacker News, Dark Reading, The Record, SecurityWeek & more.

YHow Bod 26-04 Is Coming for Your Vulnerability Management ProgramHacker News·brief
Indian auto giant Bajaj Auto hit by ransomware incidentThe Record·brief
Third DraftKings Hacker Sentenced to 18 Months in PrisonSecurityWeek·brief
Critical Ubiquiti Vulnerabilities in Attackers’ CrosshairsSecurityWeek·brief
Agentic AI Security: Wrong Context, Wrong Decisions at Machine SpeedSecurityWeek·brief
Apple's MacOS Gap Lets Users Disable Security ToolsDark Reading·brief
New ‘Mistic’ RAT Opens Door to Several Ransomware FamiliesSecurityWeek·brief
Dawn of the Apex Agentic AdversaryThe Hacker News·brief
Embedding Forbidden Text in Spyware to Discourage AI AnalysisSchneier on Security·brief
Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to HijackingSecurityWeek·brief
Stealthy Mistic backdoor linked to ransomware access broker KongTukeBleepingComputer·brief
YLastPass confirms data breach after hacker compromises supply chainHacker News·brief

Showing 12 of 40View all news