See exploits land before the advisory drops. Early exploit intelligence means your detections, blocks, and playbooks are live before campaigns go mainstream.
Our summaryDeception and threat intelligence company that runs its own honeypots on the internet and inside customer networks, catching exploitation of new vulnerabilities as it happens.
“See what attackers are exploiting right now, from a global network of honeypots we run.”
Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.
Product page“Honeypots on your perimeter. Managed by us. Catching real attacks targeting your edge.”
Managed honeypots placed next to your VPNs, firewalls and gateways and made to look like your own infrastructure, alerting on attacks aimed at your perimeter.
Product page“Run Defused on your own infrastructure, cloud, on-prem, or hybrid. Full control, full data sovereignty.”
Runs Defused decoys on your own infrastructure, in the cloud, on premises or both, so the data stays with you. In early access.
Product pageStories in our coverage based on what researchers at Defused found or reported: 32 in total.
CISA warns of Ivanti Connect Secure zero-day flaw exploited by UTA0576.
Critical SonicWall SMA1000 vulnerability CVE-2026-102255 exploited days after disclosure.
Two patched PaperCut zero-days are now being abused in data theft attacks.
Hackers exploit chained Microsoft SharePoint vulnerabilities for RCE.
SAP Commerce Cloud RCE flaw (CVE-2026-58231) is actively exploited post-patch.
SharePoint vulnerability CVE-2026-55040 is being exploited in the wild after PoC release.
Hackers exploit critical SharePoint RCE flaw CVE-2026-50522 to steal machine keys.
Critical SharePoint RCE CVE-2026-50522 under active exploitation after public PoC release.
Critical ServiceNow AI Platform flaw CVE-2026-6875 is being exploited for unauthenticated code execution.
CISA orders federal agencies to patch two actively exploited Fortinet FortiSandbox vulnerabilities by July 19.
Stories where a Defused product had a vulnerability or was attacked, or Defused itself was. Useful if you run its products.
None in our coverage yet.
Get an email when a reviewed story names Defused, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.
