For coding agents

Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 777 threats · last 24 hours· last check 2026-11-05 21:00 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Last 24 hours

Most severe in everything

CAMPAIGNNO CVE YET

EXPLOITED IN THE WILD

Cybercriminals run the ARTEX AI hacking tool almost on autopilot to break into web apps and steal credentials, crypto and iOS signing certificates; 1,600+ live consoles (Check Point)ARTEX

MALWARENO CVE YET

EXPLOITED IN THE WILD

Backdoored Control Web Panel server (cwpdoor): attackers swap the CWP panel binary cwpsrv for a copy that runs their commands and hides them from logs (XLab)Control Web Panel

PHISHINGNO CVE YET

GeorgeGinx and Mir0Auth phishing kits take over Microsoft 365 accounts through device-code sign-in, hidden behind Adobe shared links and fake DocuSign pages (ANY.RUN)Microsoft 365

PHISHINGNO CVE YET

Phishing with an 'Iran Nuclear Crisis Scenarios 2027, Brussels 14 Nov 2026' meeting invite targets Poland; HTML attachment opens a Windows search window to remote server 38.244.132[.]48 (suspected Russia-linked)

Check new threats with your coding agent

It checks this feed against your repository before you add a dependency, and whenever you ask about a CVE.

Thursday, Nov 5

HIGHCAMPAIGNEXPLOITEDARTEXARTEX cybercrimeCybercriminals run the ARTEX AI hacking tool almost on autopilot to break into web apps and steal credentials, crypto and iOS signing certificates; 1,600+ live consoles (Check Point)ARTEXInfrastructure2026-11-05by InfraStack Analyst–WHAT TO DO

Wednesday, Nov 4Last 24 hoursUp to now