What is live
- Incident matrix — one row per real event; unknown attribution is shown as to be determined.
- Map — only records with a documented city or region get a marker.
- Primary documents — CERT-EU Threat Intelligence, CC BY 4.0, kept separate from incidents.
- Coverage — query matrix and explicit regional gaps.
Weekly digest
What it does not do
It does not confirm an attack without evidence, does not infer an actor, and does not fill a missing severity or attribution field by guesswork. A pending record is a candidate, not a confirmed incident.
Coverage gaps
The current automatic capture is concentrated in Europe and uses mostly English queries. There is no equivalent capture for the Americas, Asia, China or Africa yet. Those gaps are declared in the coverage matrix, not hidden.
Data and code
Original data is published under CC BY 4.0; third-party headlines and articles keep their own rights and are linked, not copied. The code is AGPL-3.0. Corrections and source proposals are handled through the repository.