Threat intelligence for security teams
Track exploited vulnerabilities from the CISA KEV catalog, 215,000+ CVEs and threat actor profiles, with cybersecurity news from trusted sources, in one dashboard.
Open the threat feed · Create a free account
What you can track
- CISA Known Exploited Vulnerabilities: Every vulnerability in the CISA KEV catalog, with vendor, product, due date and ransomware use, so you can patch what attackers are already exploiting.
- Latest CVEs: Search 215,000+ CVEs from the National Vulnerability Database with CVSS scores, affected products, weaknesses and references.
- Threat actor profiles: Profiles of 175+ threat groups built on MITRE ATT&CK, with aliases, targeted sectors, techniques and related news.
- Threat feed: Cybersecurity news from trusted sources such as Bleeping Computer, Unit 42 and Dark Reading, aggregated in real time.
- Blog: Analysis and guides on vulnerabilities, threat intelligence and security operations.
Frequently asked questions
What is WhatCyber?
WhatCyber is a comprehensive cybersecurity threat intelligence aggregator. It collects and organizes the latest security news, CVE vulnerabilities, and threat reports from trusted sources like Bleeping Computer, Unit 42, and Dark Reading into a single, real-time dashboard.
What are KEVs and why do they matter?
KEVs, or Known Exploited Vulnerabilities, are security flaws that are actively being used by attackers in the wild. We integrate the CISA KEV catalog to help you prioritize patching the most dangerous vulnerabilities first.
What information is in the Threat Actor profiles?
Our Threat Actor Directory combines MITRE ATT&CK framework data with real-time news. You get detailed insights into an actor's aliases, targeted sectors, methods, and the latest activities associated with them.
Is WhatCyber free to use?
Yes, WhatCyber offers a free tier that provides access to essential threat intelligence feeds, vulnerability updates, and threat actor profiles. We believe in democratizing access to cybersecurity information.
How often is the threat feed updated?
Our threat feed is updated in real-time. As soon as our sources publish new information, it is automatically aggregated and displayed on your dashboard, ensuring you never miss critical security updates.
Can I customize my news sources?
Absolutely. WhatCyber allows you to follow specific RSS feeds and customize your dashboard to focus on the sources and topics that matter most to you and your organization.