Contain the Spread First
Verify the next step

HKCERT

Local security alerts, ransomware prevention guidance and incident reporting information, operated by the Hong Kong Productivity Council.

GovCERT.HK

Government computer security incident coordination, security alerts and technical guidance.

CyberDefender

Anti-fraud information, cybersecurity knowledge and a suspicious-URL checking portal.

CNCERT/CC — National Computer Network Emergency Response Technical Team/Coordination Center of China

Vulnerability risk alerts, malware analysis and weekly cybersecurity reports.

TWCERT/CC

Enterprise security advisories, vulnerability alerts and incident response guidance.

CSA / SingCERT

Official Singapore incident response information and vulnerability and threat alerts.

JPCERT/CC

Japanese security alerts, vulnerability coordination, monitoring and incident handling resources.

ASD / ACSC

Business protection, backup and incident response guidance, with the latest threat alerts.

NCSC New Zealand

Organisational protection advice, threat reports and local incident reporting resources.

MyCERT / CyberSecurity Malaysia

Read security alerts, technical notes, incident analyses and Cyber999 incident reporting information.

ThaiCERT

Thailand's national portal for incident response coordination, threat information, public documents and security education.

KrCERT/CC / KISA

KISA incident response and internet security resources, including security information and reporting service guidance.

BGD e-GOV CIRT

Security alerts, technical advice, guidance and incident-handling service information from Bangladesh's national CIRT.

National CERT Pakistan / PKCERT

Read threat advisories, cybersecurity guidance and incident response resources from Pakistan's National CERT.

Sri Lanka CERT|CC

Security alerts, vulnerability information, protection resources and incident reporting channels for public and private organisations and individuals.

CERT Tonga

The national CERT of the Pacific island nation of Tonga, providing threat advice, incident handling and security education.

CERT-In / Indian Computer Emergency Response Team

Official Indian security alerts, vulnerability advisories, protection guidance and incident reporting information. Check official guidance for the scope of incident intake.

Japan Vulnerability Notes（JVN）

Vulnerability advisories jointly operated by JPCERT/CC and IPA, with affected products, fixes and vendor information.

Checked 2026.10.27: advisories on the main JVN site were accessible. An official notice dated 10.22 states that JVN iPedia and MyJVN are suspended, with no resumption date set.

NCSC UK

Public guidance on ransomware protection, organisational recovery readiness and incident response.

ENISA

Publications on the threat landscape, cyber resilience, risk management and security by design.

CERT-EU

Cybersecurity services for EU institutions, with publicly available security advisories and technical research.

BSI

Protection advice, security standards and alerts from Germany's Federal Office for Information Security.

ANSSI

Organisational protection, incident response and security guidance, mainly in French.

NCSC Switzerland

Official Swiss threat information, business security advice and incident reporting information.

NCSC Netherlands

Vulnerability alerts, organisational protection advice and incident support information from the Netherlands' National Cyber Security Centre.

INCIBE-CERT

Consult general and industrial control system alerts, vulnerability coordination and incident response services in Spain.

NCSC Ireland / CSIRT-IE

Official Irish security advice, threat advisories, coordinated vulnerability disclosure and incident reporting resources.

NCSC Finland / Traficom

Situation updates, weekly reviews, business protection guidance and incident reporting information from Finland's cybersecurity centre.

CERT-SE

Ransomware, phishing, denial-of-service protection and incident response resources from Sweden's national CSIRT.

CERT Polska / CSIRT NASK

NASK's incident response team provides technical analysis, vulnerability advisories, warning lists and protective tools.

NÚKIB / GovCERT.CZ

Alerts, guidance and government CERT service information from the Czech National Cyber and Information Security Agency.

CERT.LV

Consult Latvian incident information, security news, responsible vulnerability disclosure policy and contact channels.

CERT-EE / RIA

Information on network monitoring, incident response and security advice services from Estonia's Information System Authority.

NCSC Lithuania / NKSC

The cybersecurity centre under Lithuania's Ministry of National Defence, with incident management, activity reports and information on the cybersecurity situation.

CIRCL Luxembourg

Incident response, threat intelligence sharing and defensive tool resources, including MISP, Lookyloo and Pandora.

CERT.at

Incident handling information, security updates and organisational reporting guidance from Austria's national CERT.

Dutch Institute for Vulnerability Disclosure（DIVD）

Learn about vulnerability scanning, notifications to affected systems and coordinated disclosure; check received vulnerability notices against public case information.

CISA StopRansomware

US interagency ransomware alerts, protection checklists and incident response resources.

Canadian Centre for Cyber Security

Official Canadian security alerts, organisational protection and cyber recovery guidance.

FBI Internet Crime Complaint Center

Cybercrime warnings, statistical reports and the IC3 complaint portal. Refer to official guidance for reporting arrangements.

CERT.br

Brazilian incident coordination, trend analysis and security education resources maintained by NIC.br.

CERT.ar

Argentina's national CERT, providing public-sector incident handling information, prevention guides and security advice.

ANCI / CSIRT Chile

Official advisories, security education, incident reporting and CSIRT resources from Chile's national cybersecurity agency.

CERTuy

Threat alerts, best practices, incident management and reporting information from Uruguay's national incident response centre.

CSIRT-CR / MICITT

Service scope, protection information and official contact channels for Costa Rica's government incident response centre.

EcuCERT / ARCOTEL

Incident response centre of telecommunications regulator ARCOTEL, providing alerts, technical information and reporting channels.

CISA Known Exploited Vulnerabilities（KEV）

Find vulnerabilities with evidence of exploitation as one input to patch prioritisation. Absence from the list does not mean safety; check your own assets and vendor advice too.

Saudi CERT / NCA

Incident response and threat information from Saudi Arabia's National Cybersecurity Authority.

aeCERT / TDRA

Read official service descriptions for incident monitoring, response and recovery support.

CERT-MU

Mauritius's national response centre, providing incident coordination, risk information and security education.

TZ-CERT

Security advisories, alerts, protective guidance and incident reporting resources from Tanzania's national response team.

maCERT / DGSSI

Morocco's DGSSI monitoring, detection and incident coordination centre, with information on its services and official response responsibilities.

ANCS Tunisia

Security alerts, incident reporting, audit resources and public guidance from Tunisia's national cybersecurity agency.

No More Ransom

Find applicable ransomware decryption tools and prevention information. Not every ransomware family has a solution.

FIRST

Incident response team directory, collaboration resources and the CVSS vulnerability scoring standard.

CERT/CC Vulnerability Notes

Carnegie Mellon SEI vulnerability coordination advisories, with impact and remediation information.

MITRE ATT&CK

A knowledge base organised by attack behaviour, supporting checks of detection and mitigation measures.

NIST Cybersecurity Framework

Organise cybersecurity work across Govern, Identify, Protect, Detect, Respond and Recover.

OWASP Foundation

Resources for application security, software supply chains and open-source protection projects.

CVE Program

Check public vulnerability identifiers and records; confirm fixed versions in vendor advisories.

MITRE CWE

Explore software and hardware weakness types, root cause mappings and priority weakness lists to help analyse remediation options.

MITRE CAPEC

Browse attack pattern classifications and public references to understand threat modelling and defence requirements.

IETF Datatracker

Follow network protocol documents, working groups and standards progress. Check the status and expiry of any drafts used.

RFC Editor

Consult published RFCs, document status and errata to verify the technical basis of network and security protocols.

The Shadowserver Foundation

View malicious activity and exposure statistics, and how to request remediation reports for your network. Report eligibility and recipients follow official arrangements.

Center for Internet Security（CIS）

Use CIS Controls to organise priority safeguards and explore CIS Benchmarks for system configuration baselines. Check individual download, membership and service terms separately.

NIST National Vulnerability Database（NVD）

Consult CVE records, impact scores and related references to identify affected products. Confirm actual fixed versions against vendor advisories.