World signal: Cyber

Real events from cleared public sources only. Each layer shows its own count and fetch time; nothing is simulated.

How it works: where each event comes from, how fresh it is and how sure the source is.

See the map

How this works

Where does each event come from?
Only from the sources listed under Sources and licences. Every card and map point links to the source's own record (the evidence).
How fresh is it?
A background worker reads each source on a fixed schedule; visitors never trigger a fetch. Each layer shows its own last successful fetch time. Failed sources and caches older than their declared freshness budget are labelled stale. Event time is the source's occurrence or geometry-update time; observed time records our fetch. An old event does not become new when fetched again. Revised events retain one identity in RSS.
How sure is it?
Confidence is the source's own status: USGS "reviewed" or "automatic" solutions; NASA EONET events are curated and their locations are approximations, not official extents.
Is this everyone's view?
Yes. Every visitor, person or crawler, receives the same facts. Views only reorder them.
What is deliberately missing?
Aircraft, ships and satellites (no source cleared for commercial use), and cameras or plate readers (outside EVY policy). No people are tracked.

Source status

Overall: OK. 80 events shown for topic Cyber; 0 with a published location. Last worker run finished 2026-10-11T23:18:52.756Z.

LayerStatusEventsLast successful fetchLast error
Earthquakes (USGS, magnitude 2.5+, past day)OK452026-10-11T23:18:52.356Z—
Natural events (NASA EONET, open, last 30 days)OK642026-10-11T23:18:52.358Z—
Cybersecurity · CISA known exploited vulnerabilitiesOK802026-10-11T23:18:52.358Z—
Science · recent journal publication metadata (Crossref)OK402026-10-11T23:18:52.359Z—
Weather · active US alerts (NOAA/NWS)OK1002026-10-11T23:18:52.359Z—

Counts are what each source returned in its last successful fetch, not global coverage. Aircraft, ships, satellites and cameras are not shown (see Sources and licences).

Map

Cyber (80)

Latest events (60 of 80)

Topics

All topics

Timeline

2026-10-08

  1. — Cyber: CVE-2015-5477 · ISC BIND: ISC BIND Data Processing Errors Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2015-3306 · ProFTPD ProFTPD: ProFTPD Improper Access Control Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2021-3199 · ONLYOFFICE Docs: ONLYOFFICE Docs Server Path Traversal Vulnerability (CISA_KEV)
  4. — Cyber: CVE-2016-3081 · Apache Struts: Apache Struts Command Injection Vulnerability (CISA_KEV)
  5. — Cyber: CVE-2023-22894 · Strapi Strapi: Strapi Cleartext Storage of Sensitive Information Vulnerability (CISA_KEV)

2026-10-04

  1. — Cyber: CVE-2026-88779 · Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CISA_KEV)

2026-10-02

  1. — Cyber: CVE-2026-102489 · Zammad GmbH Zammad: Zammad GmbH Zammad Session Fixation Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-102490 · Zammad GmbH Zammad: Zammad GmbH Zammad Improper Privilege Management Vulnerability (CISA_KEV)

2026-10-01

  1. — Cyber: CVE-2026-104286 · Fortinet FortiMail: Fortinet FortiMail Path Traversal Vulnerability (CISA_KEV)

2026-09-30

  1. — Cyber: CVE-2026-76504 · Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (CISA_KEV)

2026-09-29

  1. — Cyber: CVE-2026-86950 · Apple Multiple Products: Apple Multiple Products Out-of-Bounds Write Vulnerability (CISA_KEV)

2026-09-27

  1. — Cyber: CVE-2026-88772 · Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-88771 · Citrix NetScaler: Citrix NetScaler Improper Input Validation Vulnerability (CISA_KEV)

2026-09-25

  1. — Cyber: CVE-2026-87902 · WordPress Core: WordPress Core Remote File Inclusion Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-67279 · MikroTik RouterOS: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2026-65660 · Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability (CISA_KEV)

2026-09-24

  1. — Cyber: CVE-2026-71362 · Adobe Commerce and Magento : Adobe Commerce and Magento Incorrect Authorization Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-5430 · WSO2 Multiple Products: WSO2 Multiple Products Path Traversal Vulnerability (CISA_KEV)

2026-09-22

  1. — Cyber: CVE-2026-93616 · Check Point Multiple Products: Check Point Multiple Products Path Traversal Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-85102 · Check Point Multiple Products: Check Point Multiple Products Improper Certificate Validation Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2026-94127 · F5 BIG-IP APM: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (CISA_KEV)
  4. — Cyber: CVE-2026-93952 · Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability (CISA_KEV)

2026-09-21

  1. — Cyber: CVE-2026-7273 · Zyxel GS1900 Series Switches: Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability (CISA_KEV)

2026-09-18

  1. — Cyber: CVE-2025-39682 · Linux Kernel: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-53266 · Linux Kernel: Linux Kernel Out-of-Bounds Write Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2025-39964 · Linux Kernel: Linux Kernel Race Condition Vulnerability (CISA_KEV)

2026-09-16

  1. — Cyber: CVE-2026-76460 · Cisco Identity Services Engine: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-58704 · Google Pixel: Google Pixel Improper Authorization Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2026-87886 · Acronis Backup: Acronis Backup Incorrect Default Permissions Vulnerability (CISA_KEV)

2026-09-14

  1. — Cyber: CVE-2026-76461 · Cisco Secure Email Gateway: Cisco Secure Email Gateway SQL Injection Vulnerability (CISA_KEV)

2026-09-11

  1. — Cyber: CVE-2026-42018 · JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-42016 · JFrog Artifactory: JFrog Artifactory Incorrect Authorization Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2026-84869 · ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability (CISA_KEV)
  4. — Cyber: CVE-2026-85706 · GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability (CISA_KEV)

2026-09-10

  1. — Cyber: CVE-2026-86060 · MikroTik RouterOS: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-67277 · MikroTik RouterOS: MikroTik RouterOS Missing Authentication for Critical Function Vulnerability (CISA_KEV)

2026-09-09

  1. — Cyber: CVE-2026-20079 · Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-87491 · Google Chromium V8: Google Chromium V8 Out of Bounds Write Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2026-19490 · Citrix NetScaler: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability (CISA_KEV)
  4. — Cyber: CVE-2025-25249 · Fortinet Multiple Products: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability (CISA_KEV)

2026-09-08

  1. — Cyber: CVE-2026-86218 · N-able N-central: N-able N-central Static Code Injection Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-81963 · Microsoft Windows: Microsoft Windows Link Following Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2026-75650 · Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (CISA_KEV)
  4. — Cyber: CVE-2026-85880 · Microsoft Windows: Microsoft Windows Heap-Based Buffer Overflow Vulnerability (CISA_KEV)

2026-09-04

  1. — Cyber: CVE-2026-85046 · Google Chromium V8: Google Chromium V8 Type Confusion Vulnerability (CISA_KEV)

2026-09-02

  1. — Cyber: CVE-2026-9586 · Sangoma Switchvox: Sangoma Switchvox SQL Injection Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-83548 · SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2026-59822 · BerriAI LiteLLM: BerriAI LiteLLM Improper Authentication Vulnerability (CISA_KEV)
  4. — Cyber: CVE-2026-48710 · Kludex Starlette: Kludex Starlette HTTP Request/Response Smuggling Vulnerability (CISA_KEV)
  5. — Cyber: CVE-2026-82329 · JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability (CISA_KEV)
  6. — Cyber: CVE-2026-83549 · SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances OS Command Injection Vulnerability (CISA_KEV)
  7. — Cyber: CVE-2026-49869 · Kestra Kestra OSS: Kestra OSS OS Command Injection Vulnerability (CISA_KEV)

2026-08-31

  1. — Cyber: CVE-2026-82078 · PaperCut NG/MF: PaperCut NG/MF Unsafe Reflection Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-81578 · PaperCut NG/MF: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability (CISA_KEV)

2026-08-27

  1. — Cyber: CVE-2023-49105 · ownCloud ownCloud: ownCloud Improper Authentication Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-66384 · JFrog Artifactory: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2026-53362 · Linux Kernel: Linux Kernel Unspecified Vulnerability (CISA_KEV)

2026-08-26

  1. — Cyber: CVE-2015-3246 · Red Hat Libuser: Red Hat Libuser Race Condition Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-8452 · Citrix NetScaler ADC and NetScaler Gateway: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2019-1068 · Microsoft SQL Server: Microsoft SQL Server Remote Code Execution Vulnerability (CISA_KEV)
  4. — Cyber: CVE-2022-0995 · Linux Kernel: Linux Kernel Out-of-Bounds Write Vulnerability (CISA_KEV)
  5. — Cyber: CVE-2021-23758 · Ajax.NET Professional Ajax.NET Professional: Ajax.NET Professional Deserialization of Untrusted Data Vulnerability (CISA_KEV)
  6. — Cyber: CVE-2015-5287 · Red Hat Automatic Bug Reporting Tool: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability (CISA_KEV)

2026-08-25

  1. — Cyber: CVE-2026-60004 · Gitea Gitea: Gitea Code Injection Vulnerability (CISA_KEV)

2026-08-24

  1. — Cyber: CVE-2026-21962 · Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability (CISA_KEV)

2026-08-21

  1. — Cyber: CVE-2026-73570 · Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability (CISA_KEV)

2026-08-20

  1. — Cyber: CVE-2026-72529 · TrueConf Server: TrueConf Server Missing Authentication for Critical Function Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-72530 · TrueConf Server: TrueConf Server Code Injection Vulnerability (CISA_KEV)

2026-08-19

  1. — Cyber: CVE-2026-64849 · MLflow MLflow: MLflow Server-Side Request Forgery Vulnerability (CISA_KEV)

2026-08-18

  1. — Cyber: CVE-2026-59310 · Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-55040 · Microsoft SharePoint: Microsoft SharePoint Weak Authentication Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2026-33824 · Microsoft Internet Key Exchange (IKE) Service Extensions: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (CISA_KEV)
  4. — Cyber: CVE-2026-65400 · Apple macOS: Apple macOS Improper Authentication Vulnerability (CISA_KEV)

2026-08-17

  1. — Cyber: CVE-2025-62593 · Ray-Project Ray: Ray-Project Ray Code Injection Vulnerability (CISA_KEV)

2026-08-11

  1. — Cyber: CVE-2026-68820 · Microsoft Windows Ancillary Function Driver for WinSock : Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (CISA_KEV)
  2. — Cyber: CVE-2026-20349 · Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) : Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability (CISA_KEV)
  3. — Cyber: CVE-2026-72898 · Metabase Metabase: Metabase SQL Injection Vulnerability (CISA_KEV)

2026-08-07

  1. — Cyber: CVE-2026-8037 · Progress LoadMaster: Progress LoadMaster Command Injection Vulnerability (CISA_KEV)

2026-08-05

  1. — Cyber: CVE-2026-63077 · JetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability (CISA_KEV)

2026-08-04

  1. — Cyber: CVE-2026-18556 · N-able N-central: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (CISA_KEV)

Sources and licences

Shown (cleared for commercial display)

LayerLicence classLicenceAttributionFeed
Earthquakes (USGS, magnitude 2.5+, past day)COMMERCIAL_OKUS-PD-USGSData courtesy of the U.S. Geological Surveyhttps://earthquake.usgs.gov/earthquakes/feed/v1.0/summary/2.5_day.geojson
Natural events (NASA EONET, open, last 30 days)COMMERCIAL_OKNASA-EOSDIS-CC0Event metadata: NASA Earth Observatory Natural Event Tracker (EONET). Linked third-party source pages keep their own terms.https://eonet.gsfc.nasa.gov/api/v3/events?status=open&days=30&limit=300
Cybersecurity · CISA known exploited vulnerabilitiesCOMMERCIAL_OKCISA-KEV-CC0CISA KEV metadata, CC0. Official CISA-maintained mirror; no endorsement.https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json
Science · recent journal publication metadata (Crossref)COMMERCIAL_OKCROSSREF-FACTS-CC0Crossref bibliographic facts only; publisher titles and publication dates. No abstracts or full text.https://api.crossref.org/works?rows=40&filter=type:journal-article&sort=published&order=desc&select=DOI,title,published,container-title
Weather · active US alerts (NOAA/NWS)COMMERCIAL_OKNWS-OPEN-DATANational Weather Service open data. US coverage; consult the official alert for safety decisions.https://api.weather.gov/alerts?active=true&limit=100

Not shown

LayerStatusCandidate sourcesReason
AIRCRAFTNOT_CLEAREDOpenSky Network; adsb.lolOpenSky data licence is non-commercial (research/education/government); adsb.lol publishes ODbL data but no commercial API terms, and military/individual aircraft tracking is outside EVY policy.
SHIPSNOT_CLEAREDAISStream.ioNo formal terms of service and an account key is required; not signed up, not reviewed.
SATELLITESNOT_CLEAREDCelesTrak GP/TLENo published licence; redistribution is probably governed by the Space-Track user agreement, which has not been reviewed.
ACTIVE_FIRES_FIRMSNOT_CONFIGUREDNASA FIRMSData is open (NASA), but the API needs a MAP_KEY that EVY does not hold; wildfire events from NASA EONET are shown instead.
CAMERAS_AND_ALPRDO_NOT_USEpublic traffic cameras; OSM ALPR tagsFrames can show people and plates; surveillance-adjacent layers are outside EVY policy (no covert surveillance, no person tracking).

Map: Made with Natural Earth (Public domain (https://www.naturalearthdata.com/about/terms-of-use/)).

Public-source signal. Sources: Data courtesy of the U.S. Geological Survey · Event metadata: NASA Earth Observatory Natural Event Tracker (EONET). Linked third-party source pages keep their own terms. · CISA KEV metadata, CC0. Official CISA-maintained mirror; no endorsement. · Crossref bibliographic facts only; publisher titles and publication dates. No abstracts or full text. · National Weather Service open data. US coverage; consult the official alert for safety decisions.. Made with Natural Earth. Not affiliated with USGS or NASA. Ads are off.