Sort by
Activity Summary - Week Ending on 19 September 2025
- Red Sky identified 9,431 connections from ‘new’ and unique, compromised IP addresses
- Hydra Communications in the UK hit 140x
- CISA Alert - Schneider Electric Exploitation
- CVE-2025-5056
- ICS-TIP-12-1
Activity Summary - Week Ending on 12 September 2025
- Red Sky identified 7,666 connections from ‘new’ and unique, compromised IP addresses
- M247 LTD in Singapore hit 827x
- CISA Alert - Honeywell OneWireless Wireless Device Manager (WDM)
- CVE-2025-2521
- C
Activity Summary - Week Ending on 29 August 2025
- Red Sky identified 10,327 connections from ‘new’ and unique, compromised IP addresses
- OVH Hosting, Inc. in Canada hit 55x
- RedSkyAlliance CTAC – Dark Web Forums/Marketplaces: 90-days
- CISA Alert - Appl
Activity Summary - Week Ending on 22 August 2025
- Red Sky identified 9,503 connections from ‘new’ and unique, compromised IP addresses
- Contabo[.]com in Germany hit 44x (previously observed)
- RedSkyAlliance CTAC – Dark Web Forums/Marketplaces: 90-days
Activity Summary - Week Ending on 15 August 2025
- Red Sky identified 9,503 connections from ‘new’ and unique, compromised IP addresses
- Cheapy-Host in the Netherlands hit 114x
- CISA Alert - Dreame Technology iOS and Android Mobile Applications
Activity Summary - Week Ending on 8 August 2025
- Red Sky identified 8,344 connections from ‘new’ and unique, compromised IP addresses
- FBW NETWORKS SAS in France hit 1,915x
- CISA Alert - Proactive Threat Hunt at US Critical Infrastructure Organizatio
Activity Summary - Week Ending on 1 August 2025
- Red Sky identified 8,344 connections from ‘new’ and unique, compromised IP addresses
- FBW NETWORKS SAS in France hit 1,915x
- CISA Alert - LG Innotek CCTV Cameras
- CVE-2025-7742
- Network Thermo
Activity Summary - Week Ending on 25 July 2025
- Red Sky identified 5,440 connections from ‘new’ and unique, compromised IP addresses
- KPROHOST LLC in the Netherlands hit 102
- CISA Alert – Interlock Ransomware
- ClickFix Social Engineering
- Co
Activity Summary - Week Ending on 18 July 2025
- Red Sky identified 9,680 connections from ‘new’ and unique, compromised IP addresses
- NortonLifeLock in Australia hit 113
- CISA Alert – FRED
- CVE-2025-1727
- The Association of American Railroads
Activity Summary - Week Ending on 11 July 2025
- Red Sky identified 5,698 connections from ‘new’ and unique, compromised IP addresses
- FBW Networks in France hit 461
- CISA Alert – Value Link
- CVE-2025-52579
- CVE-2025-50109
- Android User Warning
- P
Activity Summary - Week Ending on 4 July 2025
- Red Sky identified 10,162 connections from ‘new’ and unique, compromised IP addresses
- DataCamp in France hit 1,665
- CISA Alert – Hitachi Energy
- CVE-2020-11022
- RedXray 90-day Collection and Analys
Activity Summary - Week Ending on 27 June 2025:
- Red Sky identified 11,448 connections from ‘new’ and unique, compromised IP addresses
- CyberZone in US hit 88x 2nd week
- CISA Alert – Schnieder Electric
- CVE-2025-3905, CVE-2025-3116, CVE-2025-3117
Activity Summary - Week Ending on 20 June 2025:
- Red Sky identified 7,274 connections from ‘new’ and unique, compromised IP addresses
- CyberZone in US hit 88x
- CISA Alert – ProGauge MagLink LX
- CVE-2025-5310
- Fake CAPTCHAs
- Russian Doppelganger
- Lo
Activity Summary - Week Ending on 6 June 2025:
- Red Sky identified 18,890 connections from ‘new’ and unique, compromised IP addresses
- Contabo[.]com in Germany hit 1,714x
- RedSky DarkWeb Data Collection – last 90 Days
- CISA Alert – Santesoft
- Color
Activity Summary - Week Ending on 30 May 2025:
- Red Sky identified 18,890 connections from ‘new’ and unique, compromised IP addresses
- Contabo[.]com in Germany hit 1,714x
- RedSky Malicious E-mails Data Collection – last 7 Days
- CISA Alert – Best Practi
Activity Summary - Week Ending on 23 May 2025:
- Red Sky identified 16,345 connections from ‘new’ and unique, compromised IP addresses
- Proton[.]me in France hit 1,196x 2nd week
- RedSky Malicious OSINT Data Collection – last 7 Days
- CISA Alert – DEEBOT V
Activity Summary - Week Ending on 16 May 2025:
- Red Sky identified 16,345 connections from ‘new’ and unique, compromised IP addresses
- Proton[.]me in France hit 1,164x
- RedSky Malicious E-mail Data Collection – last 7 Days
- CISA Alert – Hitachi Energy
Activity Summary - Week Ending on 9 May 2025:
- Red Sky identified 18,203 connections from ‘new’ and unique, compromised IP addresses
- Netutils[.]io in France hit 15x
- RedSky Malicious E-mail Data Collection – last 30 Days
- CISA Alert – BrightSign
- CVE-2
Activity Summary - Week Ending on 2 May 2025:
- Red Sky identified 18,203 connections from ‘new’ and unique, compromised IP addresses
- Netutils[.]io in France hit 15x
- RedSky Source Code Secrets Data Collection – last 90 Days
- CISA Alert – Delta Electro
Activity Summary - Week Ending on 25 April 2025:
- Red Sky identified 13,055 connections from ‘new’ and unique, compromised IP addresses
- HostBaltic in Lithuania hit 171x
- RedSky ThreatRecon – last 365 Days
- CISA Alert – Yokogawa
- CVE-2025-1863
- APT29/
