NEW: Group Profiler — instant APT intel lookup.Try it →

Critical Infra — threat intelligence

Recent advisories whose title or summary heuristically matches theCritical Infra sector. Derived in-browser/at-edge from a keyword catalog — treat tags as a hint and open each source for ground truth. Ingestion is scheduled every 30 minutes and may be partial; this page is a snapshot from its last build (timestamped below).

1 recent Critical Infra advisory

This snapshot covers the latest 2,000 retrieved records. The retrieval limit was reached, so older matching advisories may be omitted.

Snapshot built . The live filter and the RSS feed reflect new items as they arrive.

  1. nvd-cve·

    CVE-2026-107019 — Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to cre

    Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports.

Other sectors:Government·Healthcare·Finance·Energy·Education·Technology·Telecom·Defense·Retail·Transportation·Legal Services

Threat groups reported to target Critical Infra

MITRE ATT&CK records 3 tracked groups with reported targeting of this sector. Each links to its ATT&CK profile: techniques by tactic, aliases, tooling and the groups closest to it by technique overlap. Reported targeting is not attribution of any specific advisory above.

BRONZE BUTLER·POLONIUM·Sandworm Team

Also on ThreatFilter:cross-source corroborated CVEs·threat group directory·every source we track