60-day activity timeline
Daily published events stacked by severity
| Date | Total | Critical | High | Medium | Low |
|---|
US Cyber Intelligence for Decision-Makers
Daily IC-methodology coverage of PRC, Russian, Iranian, and North Korean cyber operations against US networks, cited from open sources, assessed by severity.
Covering PRC · Russia · Iran · DPRK · and cross-actor campaigns
60-day sourced activity
Operational picture
Loading published totals…
critical
0
high
0
medium
0
low
0
Threat activity map
Attributed adversary-to-target flows from published, sourced events
No attributed activity is available in the current sourced window.
Critical alerts
Highest-severity events across all levels, each with named source and timestamp
Emergency Directive 26-01 orders federal agencies to mitigate F5 device exposureCISA Emergency Directive ED 26-01
Cybersecurity and Infrastructure Security Agency directs agencies to act on F5 vulnerabilitiesCISA alert
F5 discloses nation-state intrusion into product development and engineering systemsReuters
Browse by domain
Drill into per-domain and per-sector feeds
ADV-CNAdversary: China (PRC)
5US-FEDFederal Civilian Government
4PRIVSECPrivate Sector
4CI-COMMSCritical Infra: Communications
3DODDefense / Military
1CI-ENERGYCritical Infra: Energy
1CI-WATERCritical Infra: Water
1ALLIESAllied & Partner Nations
1ADV-IRAdversary: Iran
1CRIMECybercrime / Ransomware
1CI-HEALTHCritical Infra: Healthcare
-CI-FINANCECritical Infra: Financial Services
-CI-TRANSPORTCritical Infra: Transportation
-ELECTIONSElections Infrastructure
-SLTTState, Local, Tribal & Territorial
-ADV-RUAdversary: Russia
-ADV-KPAdversary: North Korea
-