LIVETHREAT INTELLIGENCE
NVD/NISTCVE-2025-29927 — Next.js Middleware Auth Bypass · All versions <15.2.3 affectedCRITICAL 9.1◆AlienVault OTXAPT29 (Cozy Bear) — Active Spear-Phishing Campaign Targeting NATO DiplomatsCRITICAL 9.3◆Recorded FutureCl0p Ransomware — MOVEit-style Campaign Targeting MFT Solutions GloballyCRITICAL 9.5◆Shodan22,000+ Redis Instances Exposed on Port 6379 — No Auth — Cryptominer RiskHIGH 8.9◆VirusTotalCVE-2025-21298 — Windows OLE Remote Code Execution · CISA KEV Catalog AddedCRITICAL 9.8◆Censys14,500+ Exposed Kubernetes API Servers Detected — Anonymous Access EnabledHIGH 8.7◆AlienVault OTXFIN7 Carbanak Group — New JavaScript Backdoor Targeting Retail POS SystemsHIGH 8.4◆NVD/NISTCVE-2025-24813 — Apache Tomcat RCE via Partial PUT · Exploit Code PublicCRITICAL 9.8◆Recorded FutureDark Web Auction: 2.1M U.S. Healthcare Records Listed · PII + Insurance DataHIGH 8.1◆VirusTotalLumma Stealer v4.1 — New Evasion Bypass for Windows Defender SmartScreenHIGH 8.6◆NVD/NISTCVE-2025-30065 — Apache Parquet RCE via Schema Parsing · CVSS Maximum ScoreCRITICAL 10.0◆Recorded FutureSalt Typhoon (China) — Telco Backdoors Persist in 3 U.S. Carriers Post-DisclosureCRITICAL 9.2◆VirusTotalDragonForce Ransomware — New Affiliate Program Attracting LockBit DefectorsHIGH 8.5◆ShodanCitrix NetScaler Bleed (CVE-2023-4966) — 4,800 Unpatched Hosts Still ExploitableCRITICAL 9.4◆CensysIvanti Connect Secure 0-Day Chain — Nation-State Actor Exploitation ConfirmedCRITICAL 9.0◆AlienVault OTXBEC Surge Q1 2026 — $3.1B in Wire Fraud · AI Voice Cloning in UseHIGH 7.9◆NVD/NISTCVE-2025-29927 — Next.js Middleware Auth Bypass · All versions <15.2.3 affectedCRITICAL 9.1◆AlienVault OTXAPT29 (Cozy Bear) — Active Spear-Phishing Campaign Targeting NATO DiplomatsCRITICAL 9.3◆Recorded FutureCl0p Ransomware — MOVEit-style Campaign Targeting MFT Solutions GloballyCRITICAL 9.5◆Shodan22,000+ Redis Instances Exposed on Port 6379 — No Auth — Cryptominer RiskHIGH 8.9◆VirusTotalCVE-2025-21298 — Windows OLE Remote Code Execution · CISA KEV Catalog AddedCRITICAL 9.8◆Censys14,500+ Exposed Kubernetes API Servers Detected — Anonymous Access EnabledHIGH 8.7◆AlienVault OTXFIN7 Carbanak Group — New JavaScript Backdoor Targeting Retail POS SystemsHIGH 8.4◆NVD/NISTCVE-2025-24813 — Apache Tomcat RCE via Partial PUT · Exploit Code PublicCRITICAL 9.8◆Recorded FutureDark Web Auction: 2.1M U.S. Healthcare Records Listed · PII + Insurance DataHIGH 8.1◆VirusTotalLumma Stealer v4.1 — New Evasion Bypass for Windows Defender SmartScreenHIGH 8.6◆NVD/NISTCVE-2025-30065 — Apache Parquet RCE via Schema Parsing · CVSS Maximum ScoreCRITICAL 10.0◆Recorded FutureSalt Typhoon (China) — Telco Backdoors Persist in 3 U.S. Carriers Post-DisclosureCRITICAL 9.2◆VirusTotalDragonForce Ransomware — New Affiliate Program Attracting LockBit DefectorsHIGH 8.5◆ShodanCitrix NetScaler Bleed (CVE-2023-4966) — 4,800 Unpatched Hosts Still ExploitableCRITICAL 9.4◆CensysIvanti Connect Secure 0-Day Chain — Nation-State Actor Exploitation ConfirmedCRITICAL 9.0◆AlienVault OTXBEC Surge Q1 2026 — $3.1B in Wire Fraud · AI Voice Cloning in UseHIGH 7.9◆
Live Intelligence

Global Threat Dashboard

Live Feed ActiveUpdated
🔴
Critical CVEs (24h)
14
🌐
Active Campaigns
237
🛡️
Threats Blocked
247,391
⚡
Avg Attack Duration
4.3h

🌍 Global Attack Origins

Last 24 hours
TOP ORIGINS
🇨🇳 China 31%
🇷🇺 Russia 24%
🇺🇸 USA 12%
🇧🇷 Brazil 8%

📈 Attack Volume (7 Days)

Attacks vs Blocked

🔴 Live CVE Feed

Loading...
8 CVEs
CVE-2025-0847RCE
Windows Kernel
Actively Exploited
9.8
CVSS
CVE-2025-1204Zero-Day
Chrome V8 Engine
Actively Exploited
9.1
CVSS
CVE-2025-0923Path Traversal
Apache HTTP Server
POC Available
8.9
CVSS
CVE-2025-1091Auth Bypass
OpenSSH 8.x
Patch Available
8.7
CVSS
CVE-2025-0761Priv Escalation
VMware vCenter
POC Available
8.5
CVSS
CVE-2025-1322RCE
Cisco IOS XE
Patch Available
8.2
CVSS
CVE-2025-0489XSS
WordPress Core
Patched v6.4.3
7.8
CVSS
CVE-2025-1047DoS
NGINX 1.24
Patch Available
7.5
CVSS

⚡ Active Incidents

6 Active
🔴LockBit 3.0 Ransomware Campaign
Sector: Financial Services
2 mins ago
Ongoing
🟠APT29 Spear-Phishing — Government
Sector: Government
14 mins ago
Ongoing
🔴Credential Stuffing — Retail Platforms
Sector: Retail
31 mins ago
Ongoing
🟡DDoS Attack — EU Telecom
Sector: Telecom
1 hr ago
Resolved
🟠SQL Injection — Healthcare APIs
Sector: Healthcare
2 hrs ago
Ongoing
🟡BEC Wire Transfer Fraud Attempt
Sector: Financial
4 hrs ago
Resolved

🎯 Attack Category Breakdown (30 Days)

Phishing & Social Engineering38%
Ransomware & Malware24%
DDoS Attacks18%
SQL Injection & Web Attacks12%
Credential Stuffing5%
Zero-Day Exploits3%