Daily Cyber Brief, November 2, 2026
Read sourced cyber advisories and next steps, or connect your agent to check which entries match your software.
Beta. Review the issue dates, sources and coverage before acting. Usage disclaimer.
- Issue date
- Source checks recorded
- Entries
- 15
Date-stamped approved issue. Check the original issue and source-check dates before acting.
Freshness uses your device clock and Eastern Time. Automated issue: scripts collected these rows and checked them against their cited sources. No person reviewed it. Controls are blank where no sourced mapping exists.
Bottom line
- What is listed. 2 of 15 entries are on CISA's Known Exploited Vulnerabilities list.
- Past deadline. 2 entries have passed the US federal due date. The oldest was November 1, 2026.
- Fix status. 1 of 15 entries list a fixed version in these records. Not listed does not mean no fix exists, so check the vendor advisory.
- Canada. No entry carries a cited Canadian source. That does not establish that Canadian organizations are unaffected.
Findings
Open a row for affected versions, fix steps, checks and sources.
15 of 15 entries
Sorted by Issue order (Canada first).
Number 1Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareCVE-2026-76418Widely deployedA vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.CVSS 8.6EPSS 0.8%Deadline passedCISA due Nov 1, 2026, passed
What happened
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- CISA KEV required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. Federal due date 2026-11-01.
- Follow the vendor advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- before 9.16.4.104
- 9.18 up to, not including, 9.18.4.96
- 9.19 up to, not including, 9.20.4.50
- 9.22 up to, not including, 9.22.3.200
- 9.23 up to, not including, 9.23.1.48
- 9.24.1 up to, not including, 9.24.1.27
- 9.24.10
- before 7.0.11
- 7.2.0 up to, not including, 7.2.13
- 7.3.0 up to, not including, 7.4.9
- 7.6.0 through 7.6.7
- 7.7.0 up to, not including, 7.7.14
- 10.0.0 up to, not including, 10.0.3
- 10.1.0
Risk record
- Severity
- Critical
- Response
- Immediate
- Added to KEV
- Oct 29, 2026
Question for leadership
The federal deadline passed on 2026-11-01. Can you show this product is patched or isolated here, and who holds the evidence?
Control mapping
- ISO 27001
- A.8.8, A.8.9, A.8.20, A.8.16
- NIST CSF 2.0
- ID.AM-02, PR.PS-02, DE.CM-01, RS.MA-01
- CIS v8
- 2, 7, 12
- ITSG-33
- SI-2, RA-5, SC-7, SI-4
- OSFI B-13
- B-13 Patch Mgmt, B-13 Vulnerability Management
Analytical mapping, not an audit finding.
Sources
Number 2GitLab Community Edition and Enterprise EditionCVE-2026-97229GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.CVSS 10EPSS 27.3%Deadline passedCISA due Nov 1, 2026, passed
What happened
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.
How to fix
- Upgrade GitLab Community Edition and Enterprise Edition to the fixed release for your branch: 19.2.8, 19.3.5, 19.4.2 or later (fixed versions per the NVD record).
- Vendor solution (CVE record): Upgrade to versions 19.2.8, 19.3.5, 19.4.2 or above.
- CISA KEV required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. Federal due date 2026-11-01.
- Follow the vendor advisory: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/
How to check
Vendor guidance: "Detecting CVE-2026-97229 Exploitation Attempts" section at https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/
Affected versions
- 19.2.0 up to, not including, 19.2.8
- 19.3.0 up to, not including, 19.3.5
- 19.4.0 up to, not including, 19.4.2
Fixed versions
- 19.2.8
- 19.3.5
- 19.4.2
Risk record
- Severity
- Critical
- Response
- Immediate
- Added to KEV
- Oct 29, 2026
Question for leadership
The federal deadline passed on 2026-11-01. Can you show this product is patched or isolated here, and who holds the evidence?
Control mapping
- ISO 27001
- A.8.8, A.8.9, A.8.20, A.8.16
- NIST CSF 2.0
- ID.AM-02, PR.PS-02, DE.CM-01, RS.MA-01
- CIS v8
- 2, 7, 12
- ITSG-33
- SI-2, RA-5, SC-7, SI-4
- OSFI B-13
- B-13 Patch Mgmt, B-13 Vulnerability Management
Analytical mapping, not an audit finding.
Sources
Number 3WAVLINK WN551X3-ACVE-2026-120345A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. Performing a manipulation of the argument data results in os command injection. It is possible to initiate the attack remotely.CVSS 9.3EPSS Not scoredNew criticalCISA due None
What happened
A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. Performing a manipulation of the argument data results in os command injection. It is possible to initiate the attack remotely.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-77 (Improper Neutralization of Special Elements used in a Command), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- M51X3_V251020-WO-182e965
Risk record
- Severity
- Critical
- Response
- Immediate
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 9.3) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Number 4WAVLINK WN551X3-ACVE-2026-120344A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. Such manipulation of the argument group_name leads to os command injection. The attack may be performed from remote.CVSS 9.3EPSS Not scoredNew criticalCISA due None
What happened
A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. Such manipulation of the argument group_name leads to os command injection. The attack may be performed from remote.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-77 (Improper Neutralization of Special Elements used in a Command), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- M51X3_V251020-WO-182e965
Risk record
- Severity
- Critical
- Response
- Immediate
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 9.3) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Number 5Termix-SSH TermixCVE-2026-120322A vulnerability was identified in Termix-SSH Termix up to 2.9.2. The manipulation of the argument destPath leads to path traversal. The attack may be initiated remotely.CVSS 8.6EPSS Not scoredNew criticalCISA due None
What happened
A vulnerability was identified in Termix-SSH Termix up to 2.9.2. The manipulation of the argument destPath leads to path traversal. The attack may be initiated remotely.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Use an application firewall that can detect attacks against this weakness.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- 2.9.0
- 2.9.1
- 2.9.2
Risk record
- Severity
- High
- Response
- 7 days
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 8.6) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Control mapping
- ISO 27001
- A.8.8, A.8.9, A.8.16, A.5.15
- NIST CSF 2.0
- ID.AM-01, PR.AA-05, PR.PS-02, DE.CM-01
- CIS v8
- 6, 8, 12
- ITSG-33
- SI-2, SI-4, AC-6, AU-6
- OSFI B-13
- B-13 Patch Mgmt, B-13 Access Control
Analytical mapping, not an audit finding.
Sources
Number 6Linksys E8450CVE-2026-120283A vulnerability was identified in Linksys E8450 1.2.00.360516. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed remotely.CVSS 9.3EPSS Not scoredNew criticalCISA due None
What happened
A vulnerability was identified in Linksys E8450 1.2.00.360516. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed remotely.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Use a CPU and operating system that offers Data Execution Protection (using hardware NX or XD bits) or the equivalent techniques that simulate this feature in software, such as PaX.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- 1.2.00.360516
Risk record
- Severity
- Critical
- Response
- Immediate
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 9.3) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Number 7WAVLINK WN536AX6-ACVE-2026-120282A vulnerability was determined in WAVLINK WN536AX6-A V260507. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible.CVSS 8.6EPSS Not scoredNew criticalCISA due None
What happened
A vulnerability was determined in WAVLINK WN536AX6-A V260507. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-77 (Improper Neutralization of Special Elements used in a Command), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- V260507
Risk record
- Severity
- High
- Response
- 7 days
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 8.6) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Number 8WAVLINK WN536AX6-ACVE-2026-120281A vulnerability was found in WAVLINK WN536AX6-A V260507. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely.CVSS 9.3EPSS Not scoredNew criticalCISA due None
What happened
A vulnerability was found in WAVLINK WN536AX6-A V260507. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Use a CPU and operating system that offers Data Execution Protection (using hardware NX or XD bits) or the equivalent techniques that simulate this feature in software, such as PaX.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- V260507
Risk record
- Severity
- Critical
- Response
- Immediate
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 9.3) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Number 9WAVLINK WN536AX6-ACVE-2026-120280A vulnerability has been found in WAVLINK WN536AX6-A V260507. The manipulation of the argument group_id/group_name leads to os command injection. The attack may be initiated remotely.CVSS 9.3EPSS Not scoredNew criticalCISA due None
What happened
A vulnerability has been found in WAVLINK WN536AX6-A V260507. The manipulation of the argument group_id/group_name leads to os command injection. The attack may be initiated remotely.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-77 (Improper Neutralization of Special Elements used in a Command), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- V260507
Risk record
- Severity
- Critical
- Response
- Immediate
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 9.3) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Number 10WAVLINK WN536AX6-ACVE-2026-120279A flaw has been found in WAVLINK WN536AX6-A V260507. Executing a manipulation of the argument file_id can lead to os command injection. The attack can be launched remotely.CVSS 9.3EPSS Not scoredNew criticalCISA due None
What happened
A flaw has been found in WAVLINK WN536AX6-A V260507. Executing a manipulation of the argument file_id can lead to os command injection. The attack can be launched remotely.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-77 (Improper Neutralization of Special Elements used in a Command), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- V260507
Risk record
- Severity
- Critical
- Response
- Immediate
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 9.3) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Number 11WAVLINK WN536AX6-ACVE-2026-120277A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. Such manipulation of the argument group_name leads to os command injection. It is possible to launch the attack remotely.CVSS 9.3EPSS Not scoredNew criticalCISA due None
What happened
A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. Such manipulation of the argument group_name leads to os command injection. It is possible to launch the attack remotely.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-77 (Improper Neutralization of Special Elements used in a Command), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- V260507_2.0.0
Risk record
- Severity
- Critical
- Response
- Immediate
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 9.3) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Number 12WAVLINK WN536AX6-ACVE-2026-120276A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This manipulation of the argument group_name causes os command injection. It is possible to initiate the attack remotely.CVSS 9.3EPSS Not scoredNew criticalCISA due None
What happened
A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This manipulation of the argument group_name causes os command injection. It is possible to initiate the attack remotely.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-77 (Improper Neutralization of Special Elements used in a Command), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- V260507_2.0.0
Risk record
- Severity
- Critical
- Response
- Immediate
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 9.3) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Number 13WAVLINK WN553X1-BCVE-2026-120240A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack may be performed from remote.CVSS 8.6EPSS Not scoredNew criticalCISA due None
What happened
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack may be performed from remote.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-77 (Improper Neutralization of Special Elements used in a Command), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- V260403_2.0.0
Risk record
- Severity
- High
- Response
- 7 days
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 8.6) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Number 14WAVLINK WN553X1-BCVE-2026-120239A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. Performing a manipulation of the argument file_id results in os command injection. The attack is possible to be carried out remotely.CVSS 8.6EPSS Not scoredNew criticalCISA due None
What happened
A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. Performing a manipulation of the argument file_id results in os command injection. The attack is possible to be carried out remotely.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-77 (Improper Neutralization of Special Elements used in a Command), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- V260403_2.0.0
Risk record
- Severity
- High
- Response
- 7 days
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 8.6) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Number 15WAVLINK WN553X1-BCVE-2026-120238A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. Such manipulation of the argument file_id leads to os command injection. The attack can be executed remotely.CVSS 8.6EPSS Not scoredNew criticalCISA due None
What happened
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. Such manipulation of the argument file_id leads to os command injection. The attack can be executed remotely.
How to fix
- No fixed version or vendor solution for this product is confirmed in the CVE or NVD records. Check the vendor advisory for the current patch status.
- Generic hardening for CWE-77 (Improper Neutralization of Special Elements used in a Command), from the MITRE CWE catalog. This is general weakness guidance, not a vendor fix or workaround for this CVE. Phase: Operation. Run time: Run time policy enforcement may be used in an allowlist fashion to prevent use of any non-sanctioned commands.
No public detection rule for this CVE was found in Nuclei, Sigma or ET Open.
Affected versions
- 260403_2.0.0
Risk record
- Severity
- High
- Response
- 7 days
Question for leadership
NVD rates this flaw critical under at least one CVSS version (primary score 8.6) and it was published in the last day. Do you know whether it runs here, and who checks the vendor fix status today?
Sources
Control mapping
Controls these entries touch, with the number of entries for each. Analytical mapping, not an audit finding. 12 of 15 entries have no sourced control mapping.
- ISO 27001
- A.8.163
- A.8.83
- A.8.93
- A.8.202
- A.5.151
- NIST CSF 2.0
- DE.CM-013
- PR.PS-023
- ID.AM-022
- RS.MA-012
- ID.AM-011
- PR.AA-051
- CIS v8
- 123
- 22
- 72
- 61
- 81
- ITSG-33
- SI-23
- SI-43
- RA-52
- SC-72
- AC-61
- AU-61
- OSFI B-13
- B-13 Patch Mgmt3
- B-13 Vulnerability Management2
- B-13 Access Control1
Sources
Citations by publisher across this issue. Each row lists its own links. Sources checked November 2, 2026 at 02:33 a.m. EST.
- Authorities
- CVE Program15
- GitHub Advisory Database15
- NVD API15
- CISA KEV2
- OSV1
- Vendors
- Cisco1
- GitLab1
Coverage is limited to the approved entries shown. Canadian context requires cited Canadian evidence; worldwide incident and campaign collection is still being expanded. The JSON Feed includes the matching data and original verification timestamps.