Automated feed

Threat Wire

Aggregated every six hours from CISA KEV, NIST NVD, CISA advisories and trade reporting, then deduplicated and stored. Free to read, and it will stay that way, because these are links to other people's public work. What a membership adds is the analyst layer on top of them.

What “Exploited” means

The entry is on CISA’s Known Exploited Vulnerabilities catalogue, so it is being used against real targets rather than theorised about. A medium-severity KEV outranks a critical nobody has weaponised, and it is the one thing worth filtering on first.

Tuesday 13 October4

NVD20:17high8.2CVE-2025-1674
A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.
A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.
NVD20:17high8.2CVE-2025-1673
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.
NVD20:16high7.6CVE-2025-10458
Parameters are not validated or sanitized, and are later used in various internal operations.
Parameters are not validated or sanitized, and are later used in various internal operations.
NVD20:16high7.1CVE-2025-10456
A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exploit a flaw that causes the BLE target (i.e., the device under attack) to attempt to disconnect a fixed channel,…
A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exploit a flaw that causes the BLE target (i.e., the device under attack) to attempt to disconnect a fixed channel, which is not allowed per the Bluetooth specification. This leads to undefined behavior, including potential assertion failures, crashes, or memory corruption, depending on the BLE stack implementation.

Every entry links to its original source. Severity is the publisher's own rating where one exists. We don't re-score other people's advisories.

The feed right now

entries held: 200
sources reporting: 7/7
last ingest: 17:02 UTC
known exploited: 4

Severity mix

critical14
high75
medium0
low0

The publisher’s own rating. We do not re-score other people’s advisories.

What “Exploited” means

The entry is on CISA’s Known Exploited Vulnerabilities catalogue, which means it is being used against real targets rather than theorised about. A medium-severity KEV outranks a critical that nobody has weaponised, and it is the one column worth filtering on first.

Where this comes from

CISA KEV and advisories, NIST NVD, and trade reporting, pulled every six hours and deduplicated. Everything here links out to somebody else’s public work, which is why it is free and will stay that way.

Into your own tooling

JSON, CSV or STIX 2.1, on a scheduled pull. The limits and error codes are public so you can plan a pipeline before buying anything.

Read the API docs

What “Exploited” means

Tuesday 13 October4

A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.

A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.

Parameters are not validated or sanitized, and are later used in various internal operations.

A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specifically, an attacker could exploit a flaw that causes the BLE target (i.e., the device under attack) to attempt to disconnect a fixed channel,…