ICHI
ICHI
Internet Cyber Health Index
UTC
PATCH
CACHED
Internet Cyber Health Index
The one daily signal of digital ecosystem health

The Internet Cyber Health Index tracks the daily condition of the digital ecosystem by combining vulnerability pressure, exploitation, malware infrastructure, threat actor activity, outages, ransomware, and supply-chain pressure into a single executive-readable signal. A daily executive signal of internet cyber health — VECTORS dimensions in one score.

ELEVATED
Score 58 / 100
0 NORMAL25 GUARDED50 ELEVATED70 HIGH85 CRITICAL
CACHED Cached baseline · live feeds connecting
TREND Cached
CONFIDENCE Medium (57%)
UPDATED Cached baseline
FEEDS LIVE 0/16 · 0/7 core
0–24 NORMAL Routine vigilance. Standard patch cadence.
25–49 GUARDED Review patch queues. Brief security leadership.
50–69 ELEVATED Accelerate critical patches. Activate threat-hunting.
70–84 HIGH Executive notification. Emergency response posture.
85–100 CRITICAL Full incident posture. Sustained executive engagement.
TODAY'S CYBER WEATHER

Cyber conditions are elevated. Risk is being driven by active exploitation, vendor and service instability, and ransomware and C2 activity.

TOP DRIVERS
Vulnerability · — Exploitation · — Outages · —
EXECUTIVE POSTURE

Review open CRIT and HIGH CVEs against your stack. Confirm all CISA KEV patches are applied within your SLA. Monitor Tier 1 vendor status pages.

EXPLOIT

What happened

Why it matters

Ecosystem breadth

Affected trust systems

· Today's snapshot
Loading conditions
VECTORS · Methodology
7-DAY TREND
FEEDS LIVE
0 / 17 · 0/7 core
VECTORS Model ↓ · Analyst Signals ↓ · Full Breakdown · Methodology · Sources · About ↗ Status ↗
PROBES · TOP ATTACKED PORTS SANS Internet Storm Center · 24h
Probe data loading…
Entry № I

Live Observations

Pulled from /api/*
UPDATING…

Recent CVEs

STN–01 · NVD
Cache: 5 min Window: 24 hr
Severity Distribution
  • Live data loading… cached values shown
40 total (cached) All →

Known Exploited

STN–02 · CISA
Cache: 6 hr Sort: newest
Adds · Last 14 Days
  • Cached baseline · live KEV data connecting
Catalog count loading… All →

Top EPSS

STN–03 · FIRST
Source: FIRST.org Cache: 1 hr
Top 10 EPSS
  • Cached baseline · live EPSS data connecting
— with epss > 0.9 All →

Outages & Incidents

STN–04 · LIVE
Watched: 18 Cache: 2 min
Service Health
  • Cached baseline · live outage data connecting
— active All →

Internet Health

global routing & traffic monitors
opens external dashboards · refreshed continuously
5 MIN
ThousandEyes
Outages Map
At-a-glance global internet health — outages across ISPs, public clouds, and edge service networks. Auto-updates every five minutes.
View Live →
LIVE
Cloudflare
Radar
Internet traffic, trends, and shutdowns worldwide. Detailed tracking of cyber threats, BGP anomalies, and traffic shifts.
View Live →
LIVE
Catchpoint
Internet Sonar
Interactive global outage map — social media, entertainment, e-commerce, and critical SaaS dependencies.
View Live →
BGP
NetBlocks
Internet Observatory
BGP routing mishaps, autonomous-system-level visibility, and live tracking of internet shutdowns and disruptions worldwide.
View Live →

SEC 8-K · Cyber Disclosures

EDGAR · Item 1.05 material incidents · last 90 days
last 90d
last 30d
Disclosures · 12 weeks
Loading SEC EDGAR · cached baseline

Active Campaigns

named threat actors · Mandiant · CrowdStrike · Microsoft · Talos · Kaspersky · SentinelLabs
actors named
posts (90d)
Top Actors · Mention Volume
Loading APT campaigns · cached baseline

Critical Infrastructure

CISA ICS · Joint advisories · Treasury OFAC · sector-classified
last 7d
tracked
Sector Breakdown · Last 7 Days
Loading critical infrastructure · cached baseline

Network Truth

Cloudflare Radar · CAIDA IODA · what users actually experience
radar 24h
ioda 24h
ongoing
Top Affected Countries · Last 7 Days
Loading network truth · cached baseline

Sectoral Telemetry

FAA NAS Status · IODA internet signals · EIA-930 grid · live operational data · no API keys required
IODA
FAA
FCC
Loading sectoral telemetry · cached baseline

Vendor Status

55 statuspages monitored · Tier 1: hyperscalers · identity · payments · CDN  ·  Tier 2: security · observability · AI · comms · infra · SaaS  ·  Tier 3: dev / supply chain
outages
monitored
Connecting…
Live Status · All Tiers
Vendor status loading…

Ransomware Watch

ransomware.live · leak-site aggregation DARK-WEB ORIGIN
last 24h
tracked
Victims · Last 7 Days
Loading ransomware victims · cached baseline
Entry № II

The Daily Wire

5 RSS sources · curated daily
CISA · Krebs · The Hacker News · Bleeping Computer · SANS ISC
News feeds loading…
Threat & Malware
FEODOabuse.ch Feodo Tracker · active C2 servers
RANSOMWATCHransomwatch.telemetry.ltd · victim posts 24h
APTMalpedia / APT feed aggregate · named actors 90d
Vulnerability
NVDNIST NVD JSON 2.0 · CVEs published daily
CISA KEVCISA Known Exploited Vulnerabilities catalog
EPSSFIRST.org EPSS · exploitation probability scores
Infrastructure & Outages
STATUSPAGES55 vendor statuspages · 3 tiers
DSHIELDSANS DShield · port probe intensity
IODAGeorgia Tech IODA · BGP + telescope signals
FAAFAA NAS Status · ground stops + delays
Regulatory & Disclosure
SECSEC EDGAR full-text search · 8-K cyber incidents
CISA ICSCISA ICS advisories + joint advisories
RSSKrebs · BleepingComputer · DarkReading · TheRecord · SC Media