Threat Intelligence | Blackbox Intelligence Group

— CISA KEV Total

— KEVs Added (7 days)

— High-Sev CVEs (7 days)

— IOCs (24 h)

— Malicious URLs

— Ransomware-linked KEVs

CISA KEV NVD ThreatFox URLhaus

Live Threat Map

Geolocated malicious hosts from URLhaus — each marker is a real IP address distributing malware right now.

0 hosts 0 countries

CISA Known Exploited Vulnerabilities

Vulnerabilities with confirmed active exploitation — federal agencies must remediate by the due date. Source

CVE ID	Vendor / Product	Vulnerability	Date Added	Due Date	Ransomware

Recent High-Severity CVEs

CVEs published in the last 7 days with HIGH or CRITICAL CVSS scores from the National Vulnerability Database. Source

CVE ID	CVSS	Severity	Description	Published

Active Indicators of Compromise

Real IOCs (C2 servers, payloads, botnet controllers) reported in the last 24 hours via ThreatFox by abuse.ch. Source

IOC	Type	Threat	Malware	Confidence	First Seen

Malicious URLs

Recently reported malicious URLs distributing malware, tracked by URLhaus (abuse.ch). Source

Host	Threat	Status	Tags	Date Added	Reporter

Data Sources

CISA KEV Catalog U.S. Cybersecurity & Infrastructure Security Agency National Vulnerability Database NIST NVD CVE API 2.0 ThreatFox IOCs abuse.ch — community IOC sharing URLhaus abuse.ch — malicious URL tracking

All data is fetched in real time from authoritative, publicly available cybersecurity feeds. No AI-generated or simulated data is used. Refresh intervals vary by source (30 min – 6 h).