# Oktsec Radar

> Source-backed security incidents, affected systems and response guidance, published by Oktsec in English.

Radar is a selected editorial collection, not a complete vulnerability database or a scan of your environment. Priorities are Oktsec analysis. Source confirmation and checklist completion do not establish whether your systems are compromised or secure.

Read-only public resources; no authentication required. HTML pages contain the reporting without JavaScript. Each incident and briefing has a Markdown alternate generated from the same editorial record. Dates describe publication, editorial updates and source checks separately. Re-check the linked vendor advisory before acting.

## Start here

- [Incident directory](https://www.oktsec.com/radar/index.md)
- [Briefing archive](https://www.oktsec.com/radar/brief/index.md)
- [Sources and methodology](https://www.oktsec.com/radar/about)
- [Structured incident records (schema_version 1)](https://www.oktsec.com/radar/items.json)
- [EPSS, regional and package source snapshot (schema_version 1)](https://www.oktsec.com/radar/signals.json)
- [JSON Feed 1.1](https://www.oktsec.com/radar/feed.json)
- [RSS 2.0](https://www.oktsec.com/radar/feed.xml)
- [Public page sitemap](https://www.oktsec.com/radar/sitemap.xml)

## Interpretation

CISA KEV inclusion establishes known exploitation of the listed CVE, not compromise of your environment. Absence does not rule out exploitation. The date added is not the first attack date. Federal deadlines and forensic triage requirements are context, not universal obligations for private organizations or businesses in Latin America.

The JSON records distinguish editorial priority, observed exploitation, exploit demonstration, verification and patch status. The optional exploit_evidence object identifies demonstration status, CVE scope, source URLs and its own check date. A demonstration does not establish attacks in the wild, and an incident may have both a demonstrated exploit and observed attempts. The top-level kev_checked_at dates the reviewed KEV snapshot; last_verified_at dates the complete editorial record review; latest_evidence_checked_at dates the most recent individual source or exploit-evidence check. These are distinct from automatic signal refreshes. cve_details maps each CVE to its own vendor, products, source and optional severity. services lists the available assessment service IDs; sector identifies a targeted industry, not a software vendor. The signals resource separates EPSS predictions, regional advisories and exact package/version OSV queries with OpenSSF provenance. Prediction does not establish exploitation; publisher country does not establish victim location. OSV and an imported OpenSSF record are not independent confirmations. Unavailable checks retain their last successful evidence and original dates. Missing evidence is not proof of safety. Sources retain their publisher, URL and check date. Use canonical HTML URLs when citing Radar.

Review progress, personal notes and the local editorial monitor are not included in these resources. Fetching data does not subscribe anyone or authorize an action on their systems.