Glossary: Threats, Threat Actors and Motivations

KEV catalog

Also written: Known Exploited Vulnerabilities catalog, KEV

CISA's free list of flaws with proof of real attacks, each with a due date for US federal agencies. A flaw listed in KEV, like the shop plugin flaw, goes ahead of one with a higher score that isn't listed.