Live threat feed
Known-exploited CVEs, turned into patch actions.
A daily snapshot of the CISA Known Exploited Vulnerabilities catalog, mapped to the MITRE ATT&CK techniques the range teaches and to the lab components they hit. Each item becomes a graded task: reproduce it, patch it, write the detection, and prove it. The curriculum tracks what is actually being exploited in the wild.
SourceCISA KEV
Mapped toMITRE ATT&CK
Refreshscheduled Action
no serverGitHub Actions snapshot
This week, mapped to the range
Patch it in your lab.
From headline to graded task
Every item is a reproducible exercise.
- A KEV entry is mapped to an ATT&CK technique and a lab component it hits
- It becomes a board task: reproduce the exploit on a loopback target
- You write the detection and ship the patch through the CI gate
- The autograder proves the patch blocks the exploit and the detection fires
fetch CISA KEVok
map to ATT&CK14 tactics
match lab componentsboards 1-4
commit data/feed.jsonredeploy
Patch what is being exploited now.
Spin up the lab, pick an item from the feed, and prove the fix. Your detection and patch are graded automatically and sealed into your signed record.