LIVE · THREAT BOARD
What could take the machines offline tonight?
The AI build-out runs on software, power and satellites. Here is what is attacking or straining each one right now, from public feeds that update all day. Refreshed every 15 minutes.
Which software was newly exploited (CISA KEV, last 30 days)?
- CVE-2026-105134 · Ahsay AhsayCBS: Ahsay AhsayCBS Command Injection Vulnerability (2026-10-14)
- CVE-2026-76519 · Cisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal Vulnerability (2026-10-14)
- CVE-2026-105133 · Ahsay AhsayCBS: Ahsay AhsayCBS Improper Authentication Vulnerability (2026-10-14)
- CVE-2026-0322 · Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerability (2026-10-14)
- CVE-2026-104935 · Ivanti Connect Secure: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (2026-10-13)
- CVE-2026-96951 · Microsoft Windows: Microsoft Windows Command Injection Vulnerability (2026-10-13)
- CVE-2015-5477 · ISC BIND: ISC BIND Data Processing Errors Vulnerability (2026-10-08)
- CVE-2016-3081 · Apache Struts: Apache Struts Command Injection Vulnerability (2026-10-08)
- CVE-2023-22894 · Strapi Strapi: Strapi Cleartext Storage of Sensitive Information Vulnerability (2026-10-08)
- CVE-2021-3199 · ONLYOFFICE Docs: ONLYOFFICE Docs Server Path Traversal Vulnerability (2026-10-08)
- CVE-2015-3306 · ProFTPD ProFTPD: ProFTPD Improper Access Control Vulnerability (2026-10-08)
- CVE-2026-88779 · Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (2026-10-04)
- CVE-2026-102490 · Zammad GmbH Zammad: Zammad GmbH Zammad Improper Privilege Management Vulnerability (2026-10-02)
- CVE-2026-102489 · Zammad GmbH Zammad: Zammad GmbH Zammad Session Fixation Vulnerability (2026-10-02)
- CVE-2026-104286 · Fortinet FortiMail: Fortinet FortiMail Path Traversal Vulnerability (2026-10-01)
Which botnet families are online?
Where the online servers sit:
What space weather alerts are active?
No current NOAA space-weather alerts.
Which natural events is NASA tracking?
- Tropical Storm Trudy Severe Storms · 2026-10-14
- Wildfire Buckhorn 2, Cassia, Idaho Wildfires · 2026-10-10
- Wildfire PK, Sheridan, Wyoming Wildfires · 2026-10-09
- Wildfire CYRUS, Kern, California Wildfires · 2026-10-09
- Prescribed Fire Bridger Trail Unit - KPERP Rx NKRD CY26, Coconino, Arizona Wildfires · 2026-10-09
- Iceberg B52 Sea and Lake Ice · 2026-10-09
- Prescribed Fire COOPER UNIT - KPERP RX NKRD CY26, Coconino, Arizona Wildfires · 2026-10-08
- Hurricane Simon Severe Storms · 2026-10-14
- Prescribed Fire CON BSE13 RX, Covington, Alabama Wildfires · 2026-10-07
- Hurricane Isaias Severe Storms · 2026-10-11
- Prescribed Fire Bartlett Creek RX, Custer, Idaho Wildfires · 2026-10-06
- Wildfire Jones, Elko, Nevada Wildfires · 2026-10-05
Related: Is ChatGPT down? Is Claude down? · What public feeds does SIREN Dispatch show? · Is the Waffle House open? · What if an AI wakes up at 2:14 a.m.?
Sources: CISA KEV, abuse.ch Feodo Tracker, NOAA SWPC, NASA EONET. A dark feed shows as “—”, never as all clear. Source list adapted from OSIRIS (MIT). Updated 2026-10-15 03:14 UTC · JSON
What questions do people actually ask?
What could take the machines offline tonight?
The AI build-out runs on software, power and satellites. Here is what is attacking or straining each one right now, from public feeds that update all day: newly exploited software (CISA KEV), live botnet servers (abuse.ch Feodo), geomagnetic storm level (NOAA), and open natural events (NASA EONET). Refreshed every 15 minutes.
Which software was newly exploited (CISA KEV, last 30 days)?
Flaws added to CISA’s known-exploited list in 7 days · 0 used by ransomware this month. The board lists newly exploited software from CISA KEV in the last 30 days.
Which botnet families are online?
Live command-and-control servers tracked by abuse.ch Feodo Tracker · 5 on the list, 1 online.
What space weather alerts are active?
Quiet · Kp 0 now, 3 peak in 24 h (NOAA). G3+ storms can trip grids and satellites.
Which natural events is NASA tracking?
Open natural events NASA is tracking: 979 wildfires, 9 volcanoes, 8 severe storms.
Does a dark feed mean everything is clear?
A dark feed shows as “—”, never as all clear. Sources: CISA KEV, abuse.ch Feodo Tracker, NOAA SWPC, NASA EONET. Source list adapted from OSIRIS (MIT).
What does SOFTWARE UNDER ATTACK count?
Flaws added to CISA’s known-exploited list in 7 days · 0 used by ransomware this month. The board lists newly exploited software from CISA KEV in the last 30 days.
Is this a forecast that AI goes offline tonight?
No. It is a live board of public feeds that update all day — exploited software, botnet servers, space weather and natural events — not a prediction that the machines go offline.
Search-shaped sibling: Is ChatGPT down? Is Claude down? · How many days from a CVE going public to CISA listing it as exploited?.