Source health
Every source Watch reads, how it's collected and how fresh it is. All sources are public; nothing needs a login.
| Source | Status | Records |
|---|---|---|
| CISA Known Exploited Vulnerabilities What attackers are actively using | Working | 1769 records |
| CISA ICS advisories (CSAF) Industrial control advisories | Working | 150 records |
| CVE List V5 (CVE Program) Every CVE record | Working | 20 records |
| FIRST EPSS Chance a CVE is exploited in the next 30 days | Working | 1269 records |
| Federal Register Rules, proposed rules and notices | Working | 49 records |
| TSA security directives page TSA cybersecurity security directives | Working | 33 records |
| CISA cybersecurity advisories and alerts Joint advisories and alerts on campaigns; attacker techniques only where CISA names them | Working | 4 records |
| Siemens ProductCERT (CSAF) Siemens ProductCERT advisories | Working | 40 records |
| Schneider Electric CPCERT (CSAF) Schneider Electric advisories | Working | 3 records |
| ABB PSIRT (CSAF) ABB advisories | Working | 14 records |
| Cisco PSIRT (CSAF) Cisco advisories | Working | 40 records |
| Fortinet PSIRT via FortiGuard (CSAF) Fortinet advisories | Working | 14 records |
| eCFR (rule text versions) Changes to the rule text: 33 CFR 101 subpart F; 49 CFR 1580, 1582, 1584, 1520 | Working | 5 records |
| Coast Guard Maritime Commons (cyber category) Coast Guard maritime cyber notices | Working | 5 records |
| Coast Guard MaritimeCyber page Coast Guard cyber guidance, bulletins and alerts | Working | 49 records |
| Coast Guard Marine Safety Information Bulletins Marine Safety Information Bulletins | Failed uscg-msib: https://www.navcen.uscg.gov/msib-national returned HTTP 403 | — |
| MARAD MSCI advisories MARAD maritime advisories on cyber and GPS/AIS interference | Working | 2 records |
| NMFTA cybersecurity resources NMFTA trucking cybersecurity research and guidance | Failed nmfta: https://nmfta.org/standards/cybersecurity/research/ returned HTTP 403 | — |
| Reported incidents Reported attacks on transportation operators | Working | 0 records |
| GitHub Advisory Database Backup source if the CVE service is disrupted | Working | 181 records |
| NVD API 2.0 Extra severity scores and product identifiers | Needs a free key Turned off until a key is added | — |
| Regulations.gov Dockets and comment periods | Needs a free key Turned off until a key is added | — |
TSA page last changed: no change seen since Watch started watching it. CVE records scanned in this run: 11714, kept 20 for vendors on the mode list.
Not collected yet
Planned sources from the Watch specification. Until they are added, coverage has these gaps.
| Source | What it adds |
|---|---|
| Unified Agenda and OIRA review (reginfo.gov) | Planned rule dates and White House review status |
| CISA guidance pages | Voluntary guidance pages, by mode |
| Hitachi Energy, Rockwell Automation and Moxa vendor feeds | No public machine-readable feed found; their advisories arrive through CISA ICS advisories |
| Rail trade news | Rail outlets checked so far refuse automated feed requests |