KEV Live
Microsoft SMBv1 Remote Code Execution Vulnerability
Why it matters: Known-exploited in the wild — Apply updates per vendor instructions. (due 2022-08-10)
Evidence ✓ CISA KEV · CISA · added 2022-02-10 · Read the advisory →
Open Cyber Intelligence Evidence-backed Free to read
AI-native Cyber Intelligence Infrastructure
OpenTrojan unifies threat intelligence, investigations, research and enterprise operations into one trust-first platform. Every claim carries evidence, confidence and sources.
INTELLIGENCE SNAPSHOT Live sync
- KEV CISA KEV Microsoft SMBv1 Remote Code Execution Vulnerability Known-exploited in the wild — Apply updates per vendor instructions. (due 2022-08-10)
- KEV CISA KEV Apache Log4j2 Remote Code Execution Vulnerability Known-exploited in the wild — For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available. (due 2021-12-24)
- CVE NVD CVE-2021-44228: Apache Log4j2 Remote Code Execution (Log4Shell) Severity CRITICAL · CVSS 10 · affects Log4j2
- CVE NVD CVE-2017-0144: Microsoft Windows SMB Remote Code Execution (EternalBlue) Severity CRITICAL · CVSS 8.1 · affects Windows
2002CVEs
153Malware families
2591Graph entities
345Knowledge pages
Today's Cyber Intelligence
Real data · NVD / CISA KEV / MITRE ATT&CK · refreshed by the intelligence sync KEV Live
Apache Log4j2 Remote Code Execution Vulnerability
Why it matters: Known-exploited in the wild — For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available. (due 2021-12-24)
Evidence ✓ CISA KEV · CISA · added 2021-12-10 · Read the advisory →
CVE Live
CVE-2021-44228: Apache Log4j2 Remote Code Execution (Log4Shell)
Why it matters: Severity CRITICAL · CVSS 10 · affects Log4j2
Evidence ✓ NVD · NVD · updated 2024-11-21 · See details & verification →
CVE Live
CVE-2017-0144: Microsoft Windows SMB Remote Code Execution (EternalBlue)
Why it matters: Severity CRITICAL · CVSS 8.1 · affects Windows
Evidence ✓ NVD · NVD · updated 2024-07-29 · See details & verification →
Campaign Live
CISA KEV Waves 2024
Why it matters: Recurring new-KEV exploitation pushes
Evidence ✓ CISA KEV · 2 sources · Explore campaign →
Campaign Live
FortiOS VPN Attacks
Why it matters: FortiGate admin compromise wave
Evidence ✓ CISA advisory · 2 sources · Explore campaign →
Threat Actor Live
WIRTE
Why it matters: Attributed to Lebanon-linked
Evidence ✓ Researchers · 3 sources · Review actor profile →
Threat Actor Live
Soft Cell
Why it matters: Attributed to China
Evidence ✓ Researchers · 3 sources · Review actor profile →
Investigate with tools
Evidence-backed checks that connect to the intelligence graphAI Assistant
Ask AI
Ask the evidence-backed security assistant about any vulnerability, malware or threat-actor question — answers carry sources and confidence.
Ask a question →Intelligence
CVE Lookup
CVSS, severity, affected products and CISA KEV status for 2,000+ vulnerabilities synced from NVD.
Look up a CVE →Intelligence
IOC Lookup
Detect, normalize and check IP, domain, URL and hash indicators against OpenTrojan intelligence.
Check an indicator →Tools
All security tools
Email header, JWT, DNS, hash, URL and password utilities — most run locally in your browser.
Browse all 12 tools →Your Intelligence Feed
Follow entities to personalise your feedChanged entities
- CISA KEV Waves 2024 Campaign · 2026-08-26
- FortiOS VPN Attacks Campaign · 2026-08-26
- Citrix ADC Impulse Attacks Campaign · 2026-08-26
New evidence
- Microsoft SMBv1 Remote Code Execution Vulnerability — Apply updates per vendor instructions. · added 2022-02-10
- Apache Log4j2 Remote Code Execution Vulnerability — For all affected software assets for which updates exist, th · added 2021-12-10
Freshness updates
- CISA KEV Waves 2024 (2026-08-26)
- FortiOS VPN Attacks (2026-08-26)
- Citrix ADC Impulse Attacks (2026-08-26)
Follow & digest
Follow CVEs, campaigns, actors, industries and vendors to build your feed. AI drafts a private digest — a human reviews it before anything publishes.
What can you do?
Every action worksInvestigate a Threat
Start an evidence-backed investigation.
Get startedExplore Daily Intelligence
What changed today — critical CVEs, campaigns and actors.
Get startedSearch Intelligence
Query CVEs, malware, actors, campaigns and vendors.
Get startedResearch an Entity
Turn a question into a citation-backed report.
Get startedBuild a Security Brief
Draft a board-ready security briefing.
Get startedConnect Your Organization
Start a deployment project or enterprise pilot.
Get startedWhy trust OpenTrojan
Sources
NVD · CISA KEV · MITRE ATT&CK · vendor advisories
Evidence
Every claim carries a visible evidence chain
Confidence
Answered with calibrated confidence, never certainty
Freshness
Staleness tracked per item — fresh / aging / stale
Human Review
Content is reviewed before publication
Transparency
Public dashboards for trust, status and platform SLA
A living global network
Latest intelligence content
All security knowledge →- URL Reputation — How to Use and Interpret a Check Use the OpenTrojan URL Reputation checker to normalize a URL and compare its domain against threat-intelligence records, and weigh a hit responsibly.
- URL Analyzer — How to Use and Read the Parse Use the OpenTrojan URL Analyzer to parse a URL's structure locally, surface obfuscation and phishing signals, and decide whether to check its reputation.
- Password Strength Checker — How to Use and Read the Estimate Use the OpenTrojan Password Strength tool to estimate password strength from entropy and common weak-password heuristics, and understand how to improve it.
- JWT Decoder — How to Use and Inspect Claims Use the OpenTrojan JWT Decoder to decode JWT header and payload locally, inspect claims, and stay safe — signature is never verified and no secret is needed.
- IP Reputation — How to Use and Interpret a Check Use the OpenTrojan IP Reputation checker to validate an IPv4/IPv6 address and compare it against threat-intelligence records, and read a hit with the right caveats.
- IOC Lookup — How to Use and Read a Hit Use the OpenTrojan IOC Lookup tool to normalize and check IP, domain, URL and hash indicators against the intelligence store, and read what a match does and does not prove.