Open data

Global Threat Map

A 3D view of publicly reported threat-group activity and newly exploited vulnerabilities, built only from open data. It shows reported origins and targets from public research, not live attack traffic.

Open the full-screen map

About the data

Threat groups

Reported origins and targets of known threat groups come from the MISP threat-actor galaxy (CC0 1.0 / BSD-2-Clause), with MITRE ATT&CK® group identifiers. Attribution reflects public reporting, not CSMIC's own attribution.

Exploited vulnerabilities

Newly added entries in CISA's Known Exploited Vulnerabilities catalog and recent critical CVEs. This product uses data from the NVD API but is not endorsed or certified by the NVD.

Advisories

The latest advisory headlines from the Canadian Centre for Cyber Security and CISA, linked to the original publications. The map refreshes automatically from these sources.