Skip to content
Product
Use it
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Recipes
Runnable examples for the free key.
Free feeds
RSS, ransomware feed, IOC blocklist, MISP — no key.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
The data
Incident records
900 articles a day become ~70 scored incidents.
Dark web
First-party leak-site collection: victims, groups, markets.
Validated IOCs
Indicators with a false-positive gate; STIX, MISP, CSV.
Vulnerabilities
CVEs with EPSS, KEV and exploit status.
Entity graph
Actors, malware, CVEs, companies — pivotable.
For teams
For service providers
Per-client feeds, alerts and branded digests.
Use cases
How teams and builders use the corpus.
About ThreatCluster
What it is and how it is built.
Pricing
Docs
Reference
OpenAPI (Swagger)
Every endpoint, parameter and response model.
ReDoc
The same reference, long-form.
Examples on GitHub
curl, Python and Node quickstarts; daily spec snapshot.
Guides
Quickstart & plans
Key, scopes, budgets, tiers.
Integrations
Splunk, Sentinel, Elastic, agents and terminals, step by step
Export formats
STIX 2.1, MISP, CSV, text.
CLI setup
Install, log in, wire an agent.
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Recipes
Free feeds
CLI & agents
The data
Incident records
Dark web
Validated IOCs
Vulnerabilities
Entity graph
For teams
For service providers
Use cases
About ThreatCluster
Docs
OpenAPI (Swagger)
ReDoc
Examples on GitHub
Quickstart & plans
Integrations
Export formats
CLI setup
Pricing
Contact
Get a free key
Sign in
Back
Heartbleed
Vulnerability
Threat entity extracted from intelligence sources
Oct 20: 1 mention
Oct 21: 7 mentions
Oct 22: 13 mentions
Oct 23: 4 mentions
Oct 24: 1 mention
Oct 25: 0 mentions
Oct 26: 2 mentions
Oct 20
Oct 23
Oct 26
Entities
›
vulnerability
›
Heartbleed
Frequency
40
occurrences
First Seen
December 28, 2025
Last Seen
October 26, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Exploited By
ARES
Potassium
Crypto-Locker
Medusa
Associated Malware
FinStealer
Hydra
Mirai
Zeus
Tools Used
PHP2Shell
Openssl
Nmap
Centipede
CIC-BenignGenerator
CICFlowMeter
CICFlowMeter-V3
ClusterFuzz
Related CVEs
CVE-2026-109618
CVE-2026-109619
CVE-2026-47729
MITRE Techniques
T1566 - Phishing
T1059 - Command and Scripting Interpreter
T1041 - Exfiltration Over C2 Channel
T1046 - Network Service Discovery
T1110 - Brute Force
T1203 - Exploitation for Client Execution
T1505.003 - Web Shell
Affected Platforms
PHP
WordPress
Apache
Drupal
Linux
Windows
Regions
France
Netherlands
Australia
Finland
Belgium
Sectors Affected
Government
Media
Insurance
Finance
Financial
Healthcare
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
1
IA
Initial Access
T1566 - Phishing
2
EX
Execution
T1059 - Command and Scripting Interpreter
T1203 - Exploitation for Client Execution
1
PE
Persistence
T1505.003 - Web Shell
-
PE
Priv Esc
No techniques detected
-
DE
Defense Evasion
No techniques detected
1
CA
Cred Access
T1110 - Brute Force
-
DI
Discovery
No techniques detected
-
LM
Lateral Mov
No techniques detected
-
CO
Collection
No techniques detected
-
C2
C2
No techniques detected
1
EX
Exfil
T1041 - Exfiltration Over C2 Channel
-
IM
Impact
No techniques detected
7
techniques detected across
5
tactics
Related Clusters (8)
PHP2Shell: Critical RCE Vulnerabilities Prompt Emergency Patches
5d ago
·
785 sources
73
Critical PHP Vulnerabilities Exploited Before Public Disclosure
5d ago
·
227 sources
73
PHP Vulnerabilities Force Global Website Shutdowns Amid Cyber Attack Surge
4d ago
·
54 sources
73
Critical Squid Proxy Vulnerability 'Squidbleed' Exposes User Data
Jun 22
·
9 sources
71
MongoBleed Vulnerability Exposes MongoDB Data to Attackers
Jan 10
·
2 sources
53
Widespread Privacy Risks in Mobile VPN Apps Identified
Oct 5
·
0 sources
52
Old Vulnerabilities Persist Amid AI Advancements
Mar 25
·
2 sources
52
Development of Advanced Intrusion Detection Datasets for Cybersecurity
Apr 12
·
1 sources
34
Prev
1 / 2
Next
Related Articles (40)
Php2shell Php Rce
www.wiz.io
·
6h ago
Amadeus Com
www.upguard.com
·
8h ago
PHPocalypse Threat Dominates a Week of Cyber Disruption
Cxtoday
·
2d ago
PHP exploitation moves at slower-than-expected pace, but millions remain at risk
Tech.Yahoo
·
2d ago
Websites go dark as AI exposes critical security flaws
Afp
·
3d ago
Two critical PHP vulnerabilities threaten websites worldwide. Here's why Russia, where the ...
Meduza
·
3d ago
'Days or hours': Cyber expert's dire PHP warning as companies race against time to patch systems
News.Au
·
3d ago
Websites worldwide shut down after critical PHP flaws expose servers to hackers
Malaymail
·
3d ago
Heartbleed Openssl
www.cnn.com
·
3d ago
Websites shut down globally after AI finds cybersecurity flaw affecting 70% of the internet
Tech.Yahoo
·
3d ago
The Internet Is Being Protected By Two Guys Named St
www.buzzfeed.com
·
3d ago
Government and corporate websites go dark as AI exposes critical security flaws
France24
·
3d ago
Websites shut down globally after AI finds cybersecurity flaw affecting 70% of the internet
Ctvnews.Ca
·
4d ago
Some websites shut down globally as operators address PHP issue after AI finds critical flaw
Abc7Chicago
·
4d ago
The internet has broken – again. Shouldn't the tech firms that make billions from it pay to fix it?
Theguardian
·
4d ago
Websites shut down globally after AI finds a critical flaw affecting 70% of the internet
Cnn
·
4d ago
Global internet faces a wave of critical cybersecurity incidents
Vietnamnet.Vn
·
4d ago
Websites go dark worldwide as AI exposes critical security flaws
Channelnewsasia
·
4d ago
Websites go dark worldwide as AI exposes critical security flaws involving PHP
Japantoday
·
4d ago
Deep-Technical-Report-CVE-2026-109618-CVE-2026-109619
Sploitus
·
4d ago
PHP rushes out emergency patches for two critical bugs AI found first
Thenextweb
·
4d ago
PHP2Shell: 22M exposed servers at risk as emergency patches released By: James Walker
www.techtarget.com
·
4d ago
The internet is having a very bad cybersecurity day
Techcrunch
·
4d ago
Websites go dark worldwide after critical security flaws found using AI
Newindianexpress
·
4d ago
Critical PHP Patches Address 'Very, Very Bad Vulnerability'
Bankinfosecurity
·
4d ago
php2shell: Critical flaws allow code injection in PHP
Heise.De
·
5d ago
Two Dangerous Internet Security Issues Are Putting Site Admins On Edge
Engadget
·
5d ago
The Internet goes on high alert after discovery of 8 compromised TLS certs
Arstechnica
·
5d ago
Learn more at TrendAIsecurity.com
www.trendaisecurity.com
·
Oct 19
Oss Fuzz
google.github.io
·
Oct 9
Insecure Mobile Vpns The Hidden Danger
zimperium.com
·
Oct 5
Ids 2017
www.unb.ca
·
Oct 3
23572
doi.org
·
Sep 23
AI is finding vulnerabilities faster. Who is funding the people expected to fix them?
Business-Reporter
·
Aug 27
Mythos discovers 'Squidbleed,' a memory leak that's gone undetected since Clinton era
Theregister
·
Jun 23
29-Year-Old ‘Squidbleed’ Vulnerability Discovered With the Aid of Claude Mythos Preview
Cybersecuritynews
·
Jun 22
Ids 2018
www.unb.ca
·
May 31
Old Vulnerabilities, New AI Era, Amplified Risk
Trendmicro
·
Mar 25
MongoBleed Vulnerability Allows Attackers to Read Data From MongoDB's Heap Memory
Infoq
·
Jan 10
87,000+ MongoDB Instances Vulnerable to MongoBleed Flaw Exposed Online
Cybersecuritynews
·
Dec 28
Prev
1 / 8
Next
Related Entities
ARES
Potassium
Data Breach
Zero-day Exploit
Malware
Sql Injection
DDoS
Phishing
Man-in-the-Middle
Brute Force
Botnet
Credential Access