Skip to main content
QUIETLYTIC

Results appear below as you type. Use the up and down arrow keys to review them, Enter to open, Escape to dismiss.

Cyber Threat Intelligence

About Quietlytic

Quietlytic is a cyber threat intelligence publication dedicated to high-confidence research and actionable insight for security teams and organizations.

What we publish

Attack news
Ransomware, intrusions, fraud and law-enforcement actions, reported only from official government publications: CISA, the FBI and IC3, the US Department of Justice, the UK NCSC, CERT-EU, ENISA and the Australian Signals Directorate.
Vulnerabilities
CVE advisories traced to the National Vulnerability Database, the CVE Program, the CISA Known Exploited Vulnerabilities catalog and FIRST EPSS, with vendor data from Microsoft, Red Hat and the GitHub Advisory Database.
Threat actors, malware and campaigns
Profiles built on MITRE ATT&CK. Techniques, software and group links come from ATT&CK relationship data; where ATT&CK is silent, the profile says so instead of filling the gap.
Analyst tools
IOC, header, STIX, YARA and Sigma utilities that run entirely in your browser. Nothing you paste into them is sent to a server.

The full list of sources, with each one's licence and attribution terms, is on the data sources page.

How a piece is checked

  1. Every claim traces to a source

    Figures such as CVSS scores, KEV listing dates and EPSS probabilities are carried from the source record, never estimated. If a fact cannot be traced, it is left out or marked unverified.

  2. Severity, confidence and exploitation are kept apart

    A critical score is not evidence of attacks. An article only says a flaw is exploited when a source such as the KEV catalog says so, and it names that source.

  3. Automated checks run before any review

    Scripts reject malformed CVE IDs, out-of-range scores, citations outside the approved sources, text copied from a source, and any exploit code or step-by-step attack instructions.

  4. A separate review pass decides what publishes

    Drafts are prepared with AI assistance from the source data, then re-checked claim by claim against that data in an independent review. A draft that fails is rewritten or dropped, never patched to pass.

  5. No victims or private individuals are named

    News coverage describes affected organisations by sector, size and region. Charges are reported as allegations, and threat-group names appear only as the government source attributes them.

What Quietlytic is not

Quietlytic is not a live telemetry or indicator feed. MITRE ATT&CK is a curated reference, not a stream of current indicators, and the site does not publish IOC lists or detection rules. It is also not legal, financial or incident-response advice; the disclaimer sets out the limits.

Corrections and contact

Every article has a correction button that sends a report straight to the editorial queue. How corrections are reviewed and shown is set out in the editorial and corrections policy. For anything else, including source questions and press enquiries, use the contact form.