🌍 Global threat level
HIGH
Derived from 12684 intelligence item(s) in the last 30 days · Threat intel →
🇳🇿 My countries
NZ
LOW
0 items
Integration & service status
Configuration Centre →
🛡️IDS / IPS Sensors
12
All sensors online
Signature DB v4.182 · Updated 6 min ago
🚨Blocked Intrusions (24h)
3,847
214 high-severity · 42 critical signatures
↓ 12% from previous 24h
📡Detected Patterns
1,256
389 unique · 42 new this week
Correlated across all network segments
🔍 IDS / IPS — Recent Detections & Signatures
IDS/IPS Config →
Recent intrusion attempts
CRITICAL
SQL Injection attempt — finance-db.propera.local
Source: 185.220.101.42 · Signature: SID 2024781 · Blocked by IPS
HIGH
Brute-force RDP login — dc-primary.propera.local
Source: 91.215.85.19 · Signature: SID 2014263 · 247 attempts blocked
HIGH
Reverse shell outbound — ws-finance-03.propera.local
Source: 10.0.12.44 → 103.42.18.91:4444 · Signature: SID 2025112
MEDIUM
Port scan detected — 10.0.0.0/24 segment
Source: 45.33.32.156 · 1,024 ports in 8s · Signature: SID 2010935
MEDIUM
DNS tunneling attempt — ws-hr-07.propera.local
Domain: x7k2.evil-cdn.xyz · Signature: SID 2027218
Top signatures triggered (7 days)
| SID | Description | Category | Hits |
|---|---|---|---|
| 2024781 | SQL Injection — UniQueryBuilder | Attack | 1,248 |
| 2014263 | Brute-force RDP — multiple failures | Attempted | 987 |
| 2025112 | Outbound reverse shell — metasploit | Attack | 412 |
| 2010935 | Nmap SYN scan — large port range | Recon | 356 |
| 2027218 | DNS tunneling — high entropy query | Exfil | 234 |
| 2021002 | Log4Shell exploit attempt — JNDI | Attack | 189 |
| 2023456 | Cobalt Strike beacon C2 callback | Attack | 142 |
| 2018959 | HTTPS C2 traffic — JA3 fingerprint | C2 | 98 |
Active exploitation source-verified
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CVE-2026-94127
CISA - Known Exploited Vulnerabilities · 2026-09-22
CVE-2026-93952
NIST NVD - National Vulnerability Database · 2026-09-22
CVE-2026-93616
NIST NVD - National Vulnerability Database · 2026-09-22
CVE-2026-87902
NIST NVD - National Vulnerability Database · 2026-09-22
CVE-2026-5430
CISA - Known Exploited Vulnerabilities · 2026-09-24
🎯 Threats relevant to you
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CVE-2026-104935 - Ivanti Connect Secure Authentication Bypass by Spoofing Vulner
CISA - Known Exploited Vulnerabilities · relevance 30%
CVE-2026-106042 - An External Control of File Name or Path vulnerability in Ivan
NIST NVD - National Vulnerability Database · relevance 20%
CVE-2026-109412 - An exposed dangerous endpoint in Ivanti Neurons Patch for Intu
NIST NVD - National Vulnerability Database · relevance 20%
CVE-2026-100133 - Adobe Commerce is affected by a stored Cross-Site Scripting (X
NIST NVD - National Vulnerability Database · relevance 20%
CVE-2026-103849 - Adobe Commerce is affected by an Improper Neutralization of Sp
NIST NVD - National Vulnerability Database · relevance 20%
🚨Active Incidents
51 critical · 2 high🔔Active Alerts
61 critical · 3 high💻Devices at Risk
28 total · 2 exposed🏅Secure Score
26.3%74.6 / 284.0 points🔓 Recent breach findings
Data Breach Monitor →
| Account | Breach | Data exposed | Discovered | Severity | Status |
|---|---|---|---|---|---|
| c.reyes@propera-demo.com propera-demo.com |
LinkedIn 2021 | Email addressesPasswords | 24 Aug 02:49 | High | Open |
| c.reyes@propera-demo.com propera-demo.com |
Canva 2019 | Email addressesPasswords | 24 Aug 02:49 | High | Open |
| j.santos@propera-demo.com propera-demo.com |
Dropbox 2012 | Email addressesPasswords | 24 Aug 02:49 | High | Open |
📦 Application patch posture
Patch Applications →
26Out-of-date apps4 critical
14Up to date35.0% patched
8Devices needing patches40 apps tracked
0Awaiting authorization0 scheduled
🛡️ ProPera Intelligence background analysis of active incidents - no action needed
0 likely malicious
1 suspicious
2 unknown
2 low risk
| Incident | Verdict | Confidence | Predicted next | Affected |
|---|---|---|---|---|
| INC-01001 High Suspicious PowerShell activity followed by credential access |
Suspicious | 68.0% | Discovery | 1 system(s) |
| INC-01003 High Lateral movement via SMB from compromised workstation |
Unknown | 42.0% | Collection | 1 system(s) |
| INC-01002 Critical Ransomware-related file encryption activity on file server |
Unknown | 40.0% | Lateral Movement | 1 system(s) |
| INC-01005 Medium Backup service account password spray attempt |
Low Risk | 35.0% | Discovery | 1 system(s) |
| INC-01004 Medium Phishing email with macro-enabled document delivered |
Low Risk | 31.0% | Privilege Escalation | 1 system(s) |
Live / recent intelligence
Full feed →
MEDIUM
Source ↗
MEDIUM
Source ↗
HIGH
Source ↗
MEDIUM
Source ↗
HIGH
Source ↗
MEDIUM
Source ↗
HIGH
Source ↗
HIGH
Source ↗
GHSA-x397-5hrv-j9m9 - Cachet has Stored XSS in Incident Component
GitHub Security Advisories · 2026-10-20T21:09
GHSA-x32g-jvvm-4725 - A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure
GitHub Security Advisories · 2026-10-20T21:08
GHSA-4fpj-g9jf-9rgg - A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix
GitHub Security Advisories · 2026-10-20T21:08
GHSA-q78c-5jjq-57g8 - A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery
GitHub Security Advisories · 2026-10-20T21:06
GHSA-qw47-mcm5-934w - A2A Java SDK has a fail-open default task authorization
GitHub Security Advisories · 2026-10-20T21:05
GHSA-9rhm-2h4x-jwmx - A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect
GitHub Security Advisories · 2026-10-20T21:04
CVE-2026-113314 - chromium-browser: chromium-browser: Use after free in Media
Red Hat - CVE Feed · 2026-10-20T21:02
CVE-2026-113256 - chromium-browser: chromium-browser: arbitrary code execution inside sandbox via crafted HTML page
Red Hat - CVE Feed · 2026-10-20T21:02
Incidents over time last 14 days
Alerts by severity
Every metric above is computed from live platform data or official intelligence feeds. In demo mode all data is clearly labelled sample data.