On this page
New reports appear here without a reload while the page is open. Anything that arrived since your last visit is marked New.
SITCON
5
4
3
2
1
—
Reading the sources.
SITCON is this monitor's situation condition, scored from the last 48 hours of reporting. 5 is quiet, 1 is an internet-scale incident.
Situation report
I am monitoring the situation.
Hacks, breaches, exploited vulnerabilities and supply-chain attacks, pulled from public sources every hour.
SITREP
Do this today
The situation over time
A daily score rebuilt from sources that keep archives: exploited vulnerabilities, ransomware leak-site claims, breach dumps and Hacker News security stories. Every day is scored the same way, so any two days compare fairly.
Show as table
Developing situations
Stories that at least three outlets have covered in the last 72 hours, grouped automatically.
The wire
Every report from the last 14 days, newest first.
CVE monitor
Every vulnerability CISA has confirmed attackers are exploiting, from its Known Exploited Vulnerabilities catalog, back to the catalog's start.
Added to the catalog
Show as table
Most-exploited vendors
Latest additions
Protect your team
One master prompt turns today's situation into your team's response plan. Tell it what you run, copy it, and paste it into Claude Code inside your repo or into a chat with Claude.
Claude drafts the plan from this page's data and what you entered. It uses your own Claude account and can't see your systems.
Get alerted
Every sweep compares what it finds with what it has already seen. New critical reports, and anything matching your watchlist, go out to the channels you set up.
Slack, Teams or Discord
Put an incoming-webhook URL in config.json, or set SM_SLACK_WEBHOOK, SM_TEAMS_WEBHOOK or SM_DISCORD_WEBHOOK as a secret on the GitHub deploy.
Phone push with ntfy
Install the free ntfy app, subscribe to a topic name nobody would guess, and put the same name in ntfy_topic. No account needed.
RSS feed
The schedule
Run your own copy
Fork the project on GitHub, add your team's Slack, Teams or ntfy channels and watchlist as repository settings, and it sweeps every 30 minutes on free GitHub Actions.
Sources
Public feeds and trackers checked on every sweep.
Built on public data from CISA's Known Exploited Vulnerabilities catalog and advisories, the NCSC, Microsoft's security blog, ransomware.live, RansomLook, Have I Been Pwned, the GitHub Advisory Database, Hacker News (through Algolia) and the newsrooms listed above. Ransomware entries are leak-site claims made by criminals, not confirmed breaches.