Overview
Threat intelligence, unified.
All feeds nominal·last sync 54m ago
HackerFeeds unifies four continuously ingested threat-intel sources — a ransomware tracker, CVE and vulnerability intelligence, web defacement records, and a data breach directory — alongside the CISA KEV catalog and a global threat map with per-country rollups. Analysts start here to scan the day's activity, then pivot into any feed to filter, track a group or country, and subscribe to what matters.
Ransomware Incidents
32,949
Top actor:N0n
7%
vs previous periodView all
Defacements
1,745
Top notifier:FuCk PaPPU
14%
vs previous periodView all
CVEs (last 30d)
14,946
Top severity:medium
vs previous periodView all
Last 24 Hours
230
Breakdown:29 RW · 4 DF · 197 CVE
60%
vs previous 24hView all
Global threat map
Composite risk by country — hover for breakdown, click to drill in
Risk
Low → High
Threat timeline
Daily activity across sources•1,206 events (16,122 incl. hidden) in last 30d•Click legend chip to toggle
Most active this week
Top actors by source — click to drill in
7d window
Pro Console
Stop chasing alerts. Route them.
Build watchlists by vendor, CVSS, ransomware group or country. Pipe matches to Slack, PagerDuty, Splunk, Sentinel, XSOAR — or pull raw via API & TAXII 2.1.
Custom feeds
Watchlists, dedupe, enrichment
Integrations
Slack, PagerDuty, SIEM
API + TAXII
JSON, STIX 2.1, raw archive
Live Activity
Latest events across ransomware, CVEs and defacements — interleaved by recency
- CVECVE-2026-96582: A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host w…CVE-2026-96582·by NVD·medium
- CVECVE-2026-96406: A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of …CVE-2026-96406·by NVD·medium
- CVECVE-2026-93446: Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue …CVE-2026-93446·by NVD·unknown
- CVECVE-2026-91041: Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log rep…CVE-2026-91041·by NVD·high
- CVECVE-2026-88041: Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a …CVE-2026-88041·by NVD·unknown
- CVECVE-2026-80353: Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for t…CVE-2026-80353·by NVD·unknown
- CVECVE-2026-74049: Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 throu…CVE-2026-74049·by NVD·unknown
- CVECVE-2026-74048: Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to u…CVE-2026-74048·by NVD·unknown
- CVECVE-2026-113396: A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_t…CVE-2026-113396·by NVD·high
- CVECVE-2026-113395: A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgi…CVE-2026-113395·by NVD·high
- CVECVE-2026-113394: A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the…CVE-2026-113394·by NVD·high
- CVECVE-2026-113393: A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of…CVE-2026-113393·by NVD·medium
- CVECVE-2026-103119: Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body…CVE-2026-103119·by NVD·unknown
- CVECVE-2026-101356: Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlet…CVE-2026-101356·by NVD·unknown
- CVECVE-2026-101296: A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a …CVE-2026-101296·by NVD·unknown
- RANSOMWARE51Ridge (Newark NJ hosting/IT) hit by N0nNTFSaWRnZSAoTmV3YXJrIE5KIGhvc3RpbmcvSVQpQE4wbg·by N0n·medium
- RANSOMWAREOpenText hit by MimoriT3BlblRleHRATWltb3Jp·by Mimori·medium
- RANSOMWAREAveva hit by MimoriQXZldmFATWltb3Jp·by Mimori·medium
- CVECVE-2026-34485: Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated atta…CVE-2026-34485·by NVD·unknown
- CVECVE-2026-34484: Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrat…CVE-2026-34484·by NVD·unknown
- CVECVE-2026-113620: In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not …CVE-2026-113620·by NVD·critical
- CVECVE-2026-113619: In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template sub…CVE-2026-113619·by NVD·high
- CVECVE-2026-113470: Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to…CVE-2026-113470·by NVD·unknown
- RANSOMWARECity Hall - Everett, MA hit by Booba ProjectQ2l0eSBIYWxsIC0gRXZlcmV0dCwgTUFAQm9vYmEgUHJvamVjdA·by Booba Project·medium
Showing 24 of 60View full feed
Breach by HackerFeeds
25% OFF
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Billions of leaked recordsThousands of sources monitoredDaily dark-web crawls
CyberSecurity news
Live from BleepingComputer, Krebs, The Hacker News, Dark Reading, The Record, SecurityWeek & more.
- [Virtual Event] Cybersecurity Outlook 2027Dark Reading
- [Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AIDark Reading
- AOMEI yet to notify customers after hackers hijacked its software updatesThe Record·brief
- Anti-Putin messages disrupt nationwide school assessments in RussiaThe Record·brief
- AOMEI Backupper Compromised in Short-Burst Supply Chain CampaignSecurityWeek·brief
- The Key to AI Software Security Isn’t Speed, It’s MaturitySecurityWeek·brief
- YSince when was availability no longer part of security?Hacker News·brief
- Ahold Delhaize Restoring Services Disrupted by CyberattackSecurityWeek·brief
- Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before ElectionThe Hacker News·brief
- AI Platform Cairn Abused to Hack Over 100 OrganizationsSecurityWeek·brief
- Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors SaySecurityWeek·brief
- WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy RegulatorsThe Hacker News·brief
Showing 12 of 40View all news