CISA · cisa-kev
CC0 1.0; third-party linked material retains its own terms
Threat intelligence · Source-based selection
Threat Feed source catalog
Inspect the original endpoints, actual adapter scope, rights notes and collection states.
What is actually monitored
The enabled adapters include a machine-readable vulnerability catalog, the original Microsoft Security Blog RSS feed for recent candidate discovery, and specific original incident reports. Fixed article monitors detect source revisions. The RSS window is recent and bounded; it does not provide a complete publisher history.
| Original source | Collection state | Last successful check (UTC) |
|---|---|---|
| CISA · cisa-kev | ok | 2026-10-22T18:57:47+00:00 |
| CERT/CC · cert-cc | disabled-rights-review | Not active |
| Microsoft Threat Intelligence · ms-volt | ok | 2026-10-22T18:57:47+00:00 |
| Microsoft Security · ms-destructive | ok | 2026-10-22T18:57:47+00:00 |
| Microsoft Security · ms-human-operated-ransomware-2020 | ok | 2026-10-22T19:50:55+00:00 |
| Microsoft Defender Security Research Team · ms-storm-2949-cloud-breach-2026 | ok | 2026-10-22T19:50:55+00:00 |
| ESET Research / WeLiveSecurity · eset-industroyer2-caddywiper-2022 | ok | 2026-10-22T19:51:52+00:00 |
| Mandiant / Google Cloud · mandiant-russian-targeting-log-gaps-2021 | ok | 2026-10-22T19:50:55+00:00 |
| Mandiant / Google Cloud · mandiant-unc3886-esxi-logging-2023 | ok | 2026-10-22T19:50:55+00:00 |
| Microsoft Security Blog · ms-security-rss | ok | 2026-10-22T20:09:08+00:00 |
CERT/CC · cert-cc
Endpoint verified. Automated ingestion disabled pending appropriate reuse permission; SEI terms restrict reformatting.
Microsoft Threat Intelligence · ms-volt
Copyright Microsoft; source link and original editorial annotation only.
Microsoft Security · ms-destructive
Copyright Microsoft; source link and original editorial annotation only.
Microsoft Security · ms-human-operated-ransomware-2020
Original editorial annotation and brief evidence reference only; full publisher article is not redistributed.
Microsoft Defender Security Research Team · ms-storm-2949-cloud-breach-2026
Original editorial annotation and brief evidence reference only; full publisher article is not redistributed.
ESET Research / WeLiveSecurity · eset-industroyer2-caddywiper-2022
Original editorial annotation and brief evidence reference only; full publisher article is not redistributed.
Mandiant / Google Cloud · mandiant-russian-targeting-log-gaps-2021
Original editorial annotation and brief evidence reference only; full publisher article is not redistributed.
Mandiant / Google Cloud · mandiant-unc3886-esxi-logging-2023
Original editorial annotation and brief evidence reference only; full publisher article is not redistributed.
Microsoft Security Blog · ms-security-rss
Original publisher RSS used for candidate discovery. No full articles are republished; publication requires exact-source review and an original annotation.
Why a major publisher may still have no records here
Endpoint verification, reuse permission, direct evidentiary relevance and actual editorial review are separate gates. NVD, additional advisory APIs, and broad news RSS streams are not silently enabled. A maintainer should add an adapter only after verifying its format, scope, terms and failure behavior.