Select an alert
Choose an item from the list to inspect its details.
Sign in to enable personal security alerts.
Choose an item from the list to inspect its details.
SecurityFeed guide
A practical guide to finding, organising and monitoring cybersecurity intelligence.
SecurityFeed brings together cybersecurity advisories, vulnerability disclosures, research, exploit reporting and product updates from multiple sources. It is designed to make important developments easier to discover without monitoring dozens of websites.
Reports are collected, categorised and presented for review. SecurityFeed is an independent project, not an official advisory authority. Always verify important decisions against the original source.
Search by a keyword, product, source or CVE number. Select Filters to change the date range, priority, CVSS score, source, vendor, product, technology, threat or intelligence type. Uncheck items to exclude them; use the section's tick/untick control to change all options at once.
All Alerts shows the wider feed. My Feed uses your saved vendor and product choices. The CSV button exports the current filtered results.
No grouping displays an ordinary ordered list. Combined lets you nest up to three grouping levels in your chosen order, such as category, priority and vendor. The individual Priority, Category, Vendor and Source buttons group results by that one field.
Select a group heading to expand or collapse it. Grouping changes presentation, not which articles match your filters.
Sign in using Microsoft or Google, then choose the vendors and products you want to follow under My Feed settings. Your selections are saved so they are available on future visits. You can switch between All Alerts and My Feed without changing your configuration.
Alerts are optional in-app notifications, not browser push or email messages. Once enabled, choose Critical priority, High priority, or both. Monitor either your saved My Feed vendors and products or all intelligence. Your bell shows an unread count when matching new intelligence has been found.
You can mark notifications as read, dismiss them, adjust preferences or disable alerts. You must sign in to use this feature; notifications are checked while you use the site.
Operational priority is SecurityFeed's triage assessment and is not necessarily the same as a vendor's severity rating. CVSS describes the technical severity of a vulnerability. EPSS estimates the probability of exploitation in the next 30 days, where a score is available.
Scores are indicators, not guarantees. Where shown, Related reports groups articles sharing a CVE so you can compare coverage.
You do not need to create another password. Authentication is handled by Microsoft or Google. SecurityFeed requests the basic OpenID identity scope, not access to your email, contacts or files.
For your SecurityFeed account, we store the sign-in provider, its unique account identifier, an internal account ID, login time, and your saved feed and notification settings. We do not store your name, email address or password in your SecurityFeed account. The identifier is not your password or an access token.
A signed session cookie keeps you logged in. Separately, the site maintains pseudonymous visitor statistics and may process technical connection information in normal web-server logs. These are distinct from your saved account preferences.
SecurityFeed is an independently developed, free cybersecurity intelligence aggregation project. It aims to reduce information overload, not replace original vendor advisories, vulnerability databases or your organisation's vulnerability management process.
Source material, classifications and prioritisation may be incomplete or delayed. Validate important findings with the relevant publisher before taking action.
Open What Matters from the Dashboards menu or sidebar. Select a lookback of 1, 3, 7, 14 or 30 days to see recent exploitation reports, exploit or PoC reporting, CISA KEV additions and security fix reports. Each section initially displays three items; expand it to see more. Article titles open SecurityFeed details.
These are intelligence signals derived from available reporting. Reported exploitation or a patch headline does not independently confirm affected versions or remediation.
Security Support & Lifecycle shows a chronological milestone index alongside a monthly calendar. Search by product or release and choose the time horizon. Dates distinguish support milestones and end of life as supplied by the lifecycle dataset; consult vendors for exact security-support policies.
The Intelligence Dashboard shows only lifecycle milestones approaching in the next 14 days.
Personal feed
Choose the vendors and products you care about and keep that selection between visits. SecurityFeed stores only an opaque identity-provider identifier.