Defused Radar
The Radar is your curated threat intelligence feed. It highlights the most interesting and actionable signals from the Defused honeypot network - not raw noise, but the findings that matter.
Every item on the Radar is tied to real activity observed by our honeypots. If attackers aren't doing it in the wild, it doesn't appear here.
How It Works
Defused operates a distributed fleet of honeypot honeypots that attract and record real attacker traffic. The Radar watches that data stream and surfaces four types of events:
Emerging Vulnerabilities
When a significant new vulnerability drops, the Defused team evaluates whether it's relevant to the attack surface our honeypots cover and publishes an alert with context: what the vulnerability is, what exploitation looks like, and what we expect to see in the wild.
These are handpicked by the team - not auto-generated from a CVE feed. If it's on the Radar, we think it's worth your attention.
Honeypot Launches
When we deploy a new honeypot type or decoy feed, we announce it here. Each launch tells you what the honeypot emulates, what kind of traffic it captures, and how to subscribe to its data.
Discoveries
Discoveries are novel findings that surfaced directly from honeypot traffic - early exploitation of a vulnerability before it's widely reported, previously unseen exploit patterns (zero-days), unusual payload structures, or new attack variants.
These signals exist because we're watching real attacker behaviour at scale. Every Discovery has been triaged and confirmed before it reaches the Radar.
Trends
When a tracked vulnerability is exploited for the first time in live honeypot traffic, the Radar begins tracking its trajectory. Trend reports show how exploitation evolves over the days and weeks that follow - volume changes, new variants appearing, which honeypots are seeing activity, and how the pattern compares to baseline traffic.
What You Can Expect
The Radar is designed to be high-signal and low-noise. We'd rather publish fewer events that all earn your attention than flood the feed with everything our honeypots pick up. If you're checking the Radar, you can trust that each item is there for a reason.