Overview
New vulnerabilities as Ethiack detects them, whether Ethiack validated exploitation with a check or an exploit, and when, relative to CVE publication on cve.org and KEV listing.
MCP Server
Five read-only tools at https://zero.ethiack.com/mcp, streamable HTTP.
Feed API
JSON routes under https://zero.ethiack.com/api/v1/, with an OpenAPI document.
Website
The feed and its timeline.
Access
- Auth: none. Public and read-only, no account or key, unless extended access is granted.
- License: data is CC BY 4.0, credit "Ethiack Zero (https://zero.ethiack.com)".
- Terms: ethiack.com/terms.
- Privacy: ethiack.com/legal/privacy-policy.
- Support: [email protected].
Definitions
| Term | Meaning |
|---|---|
| t = 0 | Publication of the CVE record on cve.org. Every days value counts from it, negative meaning before it. |
| Lower bound | An entry with no cve.org record yet has no t = 0, so its days are measured to the time of the response and keep growing (is_lower_bound: true). |
| Check | Fires on a vulnerable deployment and stays silent on a patched one. Ethiack's pipeline validated it, or it is a public external detection module or template. |
| Exploit | An Ethiack agent produced a high-confidence full exploit against an isolated deployment of the product, or a public external detection module or template. |
| TTV | Time to validate: when Ethiack had a working check or exploit (signals.check, signals.exploit). |
| TTE | Time to exploit: the earliest listing across CISA KEV, EUVD KEV and VulnCheck KEV (signals.kev). |
Outcomes, limits and how the medians are computed: zero.ethiack.com/methodology.