WICERT / CSIRT / SOC
WithSecure
- 完整名称
- WithSecure Limited
- FIRST资料所属领域
- ICT vendor customer base
- 所属组织
- WithSecure Limited
- 所声明的团队类型
- PSIRT, CSIRT, ISAC, SOC
- 所声明的成立时间
- May 30, 2002
- FIRST加入时间
- July 21, 2021
数据获取日期 · FIRST
国际网络安全门户 / DIRECTORY
连接全球专业知识。
公共机构、响应团队、企业与研究。寻找适合您所在国家和需求的信息源。
FIRST资料分布 · 883
快照中的资料数 : 883 ·
- Government, Private and Public sectors
252 / 883 252 - Other commercial
207 / 883 207 - Industrial sector
95 / 883 95 - Financial sector
94 / 883 94 - ICT vendor customer base
57 / 883 57 - 未说明领域
50 / 883 50 - Government & military
46 / 883 46 - Research & education
45 / 883 45 - ISP customer base
37 / 883 37
国家和领域不能确定其服务范围。请在官方资料中确认服务条件。 FIRST ↗
WOCERT / CSIRT / SOC
World Bank
- 完整名称
- World Bank Group Office of Information Security Incident Response
- FIRST资料所属领域
- Government, Private and Public sectors
- 所属组织
- The World Bank Group
- 所声明的成立时间
- July 1, 2002
- FIRST加入时间
- June 19, 2010
数据获取日期 · FIRST
XSCERT / CSIRT / SOC
xSOC Trafford
- 完整名称
- xSOC Trafford
- FIRST资料所属领域
- Other commercial
- 所属组织
- Trafford IT Sp. z o.o. Sp. k.
- 所声明的团队类型
- SOC
- 所声明的成立时间
- January 8, 2024
- FIRST加入时间
- April 22, 2026
数据获取日期 · FIRST
XSCERT / CSIRT / SOC
XSRC
- 完整名称
- Xerox Security Response Center
- FIRST资料所属领域
- Government, Private and Public sectors
- 所属组织
- XEROX
- 所声明的团队类型
- PSIRT
- 所声明的成立时间
- September 1, 2012
- FIRST加入时间
- December 28, 2016
数据获取日期 · FIRST
XYCERT / CSIRT / SOC
Xylem PSIRT
- 完整名称
- Xylem Product Security Incident Response Team
- FIRST资料所属领域
- Industrial sector
- 所属组织
- Xylem
- 所声明的团队类型
- PSIRT
- 所声明的成立时间
- August 1, 2019
- FIRST加入时间
- November 17, 2022
数据获取日期 · FIRST
YCCERT / CSIRT / SOC
YCERT
- 完整名称
- Yarix Computer Emergency Response Team
- FIRST资料所属领域
- Other commercial
- 所属组织
- Yarix S.R.L.
- 所声明的团队类型
- CSIRT
- 所声明的成立时间
- September 1, 2009
- FIRST加入时间
- September 28, 2016
数据获取日期 · FIRST
YKCERT / CSIRT / SOC
YKB-CERT
- 完整名称
- YapiKredi Bank CERT
- FIRST资料所属领域
- Financial sector
- 所属组织
- YapiKredi Bank
- 所声明的团队类型
- CSIRT
- 所声明的成立时间
- January 1, 2015
- FIRST加入时间
- April 15, 2021
数据获取日期 · FIRST
YSCERT / CSIRT / SOC
YSTW-CSIRT
- 完整名称
- YSTW-CSIRT
- FIRST资料所属领域
- Financial sector
- 所属组织
- Yuanta Securities Co., Ltd.
- 所声明的团队类型
- CSIRT, SOC
- 所声明的成立时间
- December 21, 2023
- FIRST加入时间
- December 17, 2025
数据获取日期 · FIRST
Z-CERT / CSIRT / SOC
Z-CERT
- 完整名称
- Stichting Z-CERT
- FIRST资料所属领域
- Government, Private and Public sectors
- 所属组织
- -
- 所声明的团队类型
- CSIRT
- 所声明的成立时间
- November 28, 2016
- FIRST加入时间
- May 23, 2019
数据获取日期 · FIRST
ZACERT / CSIRT / SOC
ZATCA DFIR
- 完整名称
- ZATCA Digital Forensics and Incident Response Team
- FIRST资料所属领域
- Government, Private and Public sectors
- 所属组织
- Zakat, Tax, and Customs Authority - ZATCA
- 所声明的成立时间
- September 1, 2018
- FIRST加入时间
- November 20, 2024
数据获取日期 · FIRST
ZECERT / CSIRT / SOC
Zendesk CSIRT
- 完整名称
- Zendesk
- FIRST资料所属领域
- ICT vendor customer base
- 所属组织
- Zendesk
- 所声明的团队类型
- CSIRT
- 所声明的成立时间
- January 1, 2018
- FIRST加入时间
- May 23, 2019
数据获取日期 · FIRST
ZECERT / CSIRT / SOC
ZeroFox
- 完整名称
- ZeroFox
- FIRST资料所属领域
- Other commercial
- 所属组织
- ZeroFox
- 所声明的团队类型
- SOC
- 所声明的成立时间
- January 1, 2013
- FIRST加入时间
- August 19, 2026
数据获取日期 · FIRST
ZFCERT / CSIRT / SOC
ZF SOC
- 完整名称
- ZF Security Operations Center - SOC
- FIRST资料所属领域
- Industrial sector
- 所属组织
- ZF Group
- 所声明的团队类型
- SOC
- 所声明的成立时间
- January 1, 2014
- FIRST加入时间
- August 17, 2023
数据获取日期 · FIRST
ZMCERT / CSIRT / SOC
ZmCIRT
- 完整名称
- Zambia Computer Incident Response Team
- FIRST资料所属领域
- Government, Private and Public sectors
- 所属组织
- Zambia Information and Communication Technology Authority
- 所声明的团队类型
- CSIRT
- 所声明的成立时间
- September 20, 2012
- FIRST加入时间
- August 18, 2017
数据获取日期 · FIRST
ZTCERT / CSIRT / SOC
ZTE PSIRT
- 完整名称
- ZTE Product Security Incident Response Team
- FIRST资料所属领域
- ICT vendor customer base
- 所属组织
- ZTE Corporation
- 所声明的团队类型
- PSIRT
- 所声明的成立时间
- October 15, 2013
- FIRST加入时间
- January 25, 2015
数据获取日期 · FIRST
Z�CERT / CSIRT / SOC
Zürcher Kantonalbank - CSIRT
- 完整名称
- Zürcher Kantonalbank - CSIRT
- FIRST资料所属领域
- Financial sector
ZUCERT / CSIRT / SOC
ZUSO Advanced Research Team
- 完整名称
- ZUSO Advanced Research Team
- FIRST资料所属领域
- Other commercial
- 所属组织
- ZUSO Generation
- 所声明的成立时间
- April 30, 2019
- FIRST加入时间
- January 17, 2025
数据获取日期 · FIRST
ZYCERT / CSIRT / SOC
Zyxel
- 完整名称
- Zyxel Corporation
- FIRST资料所属领域
- ICT vendor customer base
- 所属组织
- Zyxel Group Corporation
- 所声明的团队类型
- PSIRT
- 所声明的成立时间
- April 21, 2021
- FIRST加入时间
- October 16, 2025
数据获取日期 · FIRST
CI公共机构
CISA · Known Exploited Vulnerabilities
Identify vulnerabilities listed by CISA as known to be exploited.
参考资料详情
- 已核实的数据或指标
- The catalogue includes CVE, product, date added and required action. Its official repository also provides the data schema.
- 使用方法
- Check applicability to your products and retain the access date. Review the requested action and vendor advisory before confirming remediation.
- 需要保留的局限
- Absence from the catalogue does not establish safety. Administrative deadlines in it are not automatically binding on every organisation.
文档核查日期
CVSS、EPSS、KEV 与 VEX
Is the vulnerability listed as known to be exploited?
Listing does not establish that the product exists in your estate; absence does not establish safety.
Read the CVSS, EPSS, KEV and VEX reference →
Primary sources and scope
- CISA · KEV official data schema · Official CISA mirror · reviewed 2026-10-22
Catalog properties · vulnerability properties · required fields
Sources checked on
浏览 CISA KEV 目录
此语言版本的详细参考说明以英语提供。
Scope of the KEV dataset
Entries preserve the CVE identifier, vendor or project, product, dates, action and published indicators. The schema distinguishes required and optional fields; absence must not silently become a negative value.
The data’s CC0 licence grants no rights to CISA’s logo or content on linked third-party websites.
1754 记录 · 2026.10.21
官方参考资料 ↗NI公共机构
NIST · SP 800-61 Rev. 3
Prepare incident response within cybersecurity risk management.
参考资料详情
- 已核实的数据或指标
- Revision 3 was published in April 2025 and supersedes Revision 2. It is a CSF 2.0 Community Profile.
- 使用方法
- Rehearse containment decisions, evidence preservation, communication and recovery. Compare planned actions with evidence produced during the exercise.
- 需要保留的局限
- Reading the guide does not validate a local plan. Contacts, emergency access and dependencies need local testing.
文档核查日期
网络事件：恢复决策与证据
Qualifying a signal, preserving investigative material and restoring a service answer different questions. CSF 2.0 distinguishes recovery initiation, integrity of restoration assets, validation of restored assets and the end of recovery. These are outcomes to document, not certification or one mandatory procedure.
The twelve entries below are a selected, paraphrased part of CSF 2.0. Evidence columns, timelines and injects are original teaching proposals. They do not replace a local plan and imply no universal timing, severity level or authority. SP 800-61 Revision 3 has been final since April 2025 and supersedes Revision 2.
Explore NIST outcomes and the timeline →
Primary references and limits
Identifiers and outcome meanings come from CSF 2.0; SP 800-61r3 adds incident response and recovery recommendations. Evidence tables, times and scenarios are educational, with no client results, certification or actual notification.
- NIST · SP 800-61 Rev. 3 · Final · 2025-04-03
Community Profile CSF 2.0 ; remplace / supersedes Rev. 2 - NIST · SP 800-61r3 — recommandations détaillées / detailed recommendations · April 2025
Pages imprimées / printed pages 27–29, 34–35 : RS.MA, RS.AN, RC.RP, RC.CO - NIST · Cybersecurity Framework 2.0 · 2024-02-26 · NIST CSWP 29
Appendix A, printed pages 22–23 : official outcome identifiers - NIST · SP 800-184 — Guide for Cybersecurity Event Recovery · Final · 2016-12-22
Recovery planning, playbooks, testing and improvement
References reviewed
SP社区与标准
SPDX · Specifications
Describe components and information in a software bill of materials.
参考资料详情
- 已核实的数据或指标
- The official specifications page distinguishes SPDX 3.0 from earlier versions such as 2.3. Document version affects schema and tool compatibility.
- 使用方法
- Request format, version, build scope and component identifiers. Compare the bill of materials with the delivered artefact.
- 需要保留的局限
- A bill of materials alone proves neither vulnerability absence, dependency completeness nor compliance with every licence.
文档核查日期
OW社区与标准
OWASP · CycloneDX
Exchange bills of materials and supply-chain information.
参考资料详情
- 已核实的数据或指标
- The official overview dates specification 1.7 to 21 October 2025 and documents JSON, XML and Protobuf.
- 使用方法
- Check version, component references and dependency links. Retain the connection between the bill of materials, build and deployed product.
- 需要保留的局限
- Changing format does not fix missing components. A descriptive inventory and a vulnerability impact assessment answer different questions.
文档核查日期
W3社区与标准
W3C · WCAG 2.2
Evaluate accessibility criteria for web content.
参考资料详情
- 已核实的数据或指标
- WCAG 2.2 is a W3C Recommendation. Success criteria have A, AA and AAA levels.
- 使用方法
- Define tasks, pages and states, then combine inspection, keyboard, zoom and relevant assistive technology. Keep reproduction steps for barriers.
- 需要保留的局限
- An automated scanner does not establish conformity of a complete journey. Evaluation must cover interactive states and actual content.
文档核查日期
表单：准则、错误与对比度
此语言版本的详细参考说明以英语提供。
WCAG 2.2 is connected here to a selection of 17 form-related criteria: labels, errors, keyboard, focus, status messages and authentication. Understanding documents and WAI tutorials are informative. The calculator compares an opaque sRGB pair with contrast thresholds; it performs neither a journey audit nor a complete evaluation of exceptions.
Open the WCAG review grid and contrast calculator →
W3C · Web Content Accessibility Guidelines (WCAG) 2.2 · Recommendation · 12 December 2024
GO私营部门
Google · Core Web Vitals
Distinguish loading, responsiveness and visual stability.
参考资料详情
- 已核实的数据或指标
- Good thresholds are LCP ≤ 2.5 s, INP ≤ 200 ms and CLS ≤ 0.1 at the 75th percentile, segmented by mobile and desktop.
- 使用方法
- Separate field measurement from laboratory tests. Record period, URL, device, population and sample size before comparing changes.
- 需要保留的局限
- These thresholds are not measured results for this site. A good lab score alone does not establish visitor experience.
文档核查日期