About
threat/intelligence is a personal project by Norbert Hofmann. It publishes curated dossiers on vulnerabilities that attackers actually exploit, with sourced timelines and detection guidance.
Author
Norbert Hofmann
Cyber Defense AnalystCyber Defense Analyst in a Security Operations Center at a managed security service provider (MSSP), based in Landshut, Germany.
Focus: incident response, threat hunting, malware analysis, red and blue teaming, security awareness.
Vulnerability research: several CVEs credited in the Wordfence vulnerability database for WordPress plugin findings.
CTF: finalist "Bayerns bester Hacker" 2021 and "Deutschlands bester Hacker" 2022.
Independence
This site is run privately and independently. Views and assessments are my own and do not represent my employer.
Editorial process
Selection focuses on CVEs newly added to CISA KEV or confirmed by vendors as exploited, vulnerabilities above the 95th EPSS percentile with a public proof of concept, or vulnerabilities with wide impact and media coverage. A dossier is written only when it adds detection guidance or assessment.
Primary sources come first. Changes are recorded in an update log, and detection queries are manually verified before they are marked as verified. Read the methodology for the full process.
Corrections
Spotted an error or have new information? Contact details are in the legal notice.