Threat landscape · regulated customer intelligence

Threat-landscape intelligence for brands under regulatory pressure.

PhishNet connects nation-state, hacktivist, ransomware, vulnerability, infrastructure, chatter and fraud signals to the brands, suppliers, services and evidence position that matter under NIS2, CyFun and DORA.

Opening platform pulse...
-Searchable evidence corpusopening
-All-time stored findingsopening
-New findings in latest runopening
-Active collection lanesopening
-Live evidence checksopening
Scope

What this track analyses.

Nation-state, hacktivist and fraud activity assessed for relevance to Belgian/EU institutions and translated into customer-safe evidence, board language, reporting triggers and action queues.

BRAND EXPOSURE

Who this touches

Actor, campaign, ransomware, exploit and fraud pressure mapped to a brand, its official journeys, supplier dependencies and affected customer services.

REGULATORY LENS

Why it matters

Each signal is mapped to NIS2, CyFun and DORA language: affected service, reportability trigger, evidence readiness and board-risk sentence.

EVIDENCE GRAPH

How we prove it

Customer-safe hashes, excerpts, provenance, timestamps and graph links connect the signal to evidence vault artifacts without exposing raw secrets.

Brand conflict exposure

From cyber-war noise to customer-specific risk.

Authenticated brand views answer the practical questions regulated customers ask: which actors are relevant, which campaigns overlap our sector, which assets or suppliers widen blast radius, and what evidence-backed action should we take next?

ACTORS

APT relevance

APT29, Sandworm, OilRig, Lazarus, Fox Kitten and other tracked actors are tied to sector pressure, TTPs, infrastructure and evidence links.

CAMPAIGNS

Hybrid pressure

APT/campaign activity, ransomware claims, KEV/CVE pressure, phishing waves and geopolitical events land in one hybrid timeline.

SUPPLIERS

Blast radius

Supplier domains, technologies, certs, hosting, nameservers and official journeys are watched passively for exposure and mimicry.

ACTIONS

Evidence-backed next steps

Recommendations link back to the evidence rows, graph neighbors, freshness state and source-policy explanation behind each number.

Regulatory impact lens

NIS2, CyFun and DORA-ready by design.

Affected service, sector and competent-authority context on every major signal.
Board sentence included: documented threat-landscape monitoring in place.
Peer benchmark wording: versus comparable Belgian and EU institutions.
Early-warning, 72h notification, final report, board letter and evidence-pack readiness.
Collection coverage meter

The page shows its own evidence posture.

Source freshness, stale lanes and credential-gated sources.
Evidence-backed rate and last-good snapshot state.
Passive OSINT posture; active probing only when customer-authorized.
Data-behind-the-number links for timeline, graph and regulatory readiness.
Attack path graph

Brand, supplier, actor, kit and evidence in one defensive graph.

The authenticated API exposes safe graph views for attack paths, suppliers, actors and kit DNA so analysts can move from a board-level statement to the underlying rows without loading raw leaked material.

/overview

First-paint brief

Summary KPIs, regulatory posture, evidence counts, source freshness and recommended action queues for a brand.

/timeline

Hybrid pressure

APT, ransomware, KEV/CVE, phishing, chatter, infrastructure warming and geopolitical context with provenance.

/graph

Customer-safe graph

Attack path, supplier, actor and kit-focused graphs linking brand assets to evidence artifacts and graph neighbors.

How the track is shared

Defensive, vetted and customer-safe.

Assessment, attribution support and evidence, never operations.
Aligned to a defensive and institutional mandate.
Vetted, by-request sharing for regulated customers, defence and government teams.
EU-only, vault-backed handling and provenance.
Connected product rails

Public-safe measures feeding the conflict picture.

Opening related product pulse-
Routes around this track

What it connects to publicly.