What changed?
Review the reported activity, affected technology, timing, and source confidence.

Search six intelligence categories, open any card for analyst context, and trace every item to its original source.
This page groups current reporting by operational use. Severity is an initial signal. Exposure, exploit evidence, identity impact, and business context determine the actual response.
Review the reported activity, affected technology, timing, and source confidence.
Match the signal against assets, identities, controls, and business processes.
Assign an owner, choose a measurable response, and preserve verification evidence.
Select a category or search titles, summaries, and publishers.
Open a card to see recommended review steps. External source links remain available for validation.
Describes potential technical impact. It does not prove exploitation or exposure.
Depends on source quality, corroboration, and whether the behavior was observed directly.