Incidents
12 open · 2 critical · MTTR 41 min
Open incidents
12
▼ 2 critical
Blocked today
18,402
● 96% scans & brute-force
Mean time to respond
41 min
▲ 12 min faster
Assets unpatched
61
▼ 9 critical CVEs
Attack volume
00h06h12h18h24h
By severity
78%
Security posture
Open incidents
| ID | Incident | Severity | Assets | Owner | Age | State |
|---|---|---|---|---|---|---|
| INC-4412 | Credential stuffing — portal de clientes | Critical | 1 | KBK. Bonilla | 38 min | Containing |
| INC-4409 | Ransomware precursor en FS-02 | Critical | 3 | JFJ. Fernández | 1 h 12 m | Investigating |
| INC-4404 | Exfiltración sospechosa a IP en RU | High | 2 | KBK. Bonilla | 4 h | Investigating |
| INC-4398 | MFA deshabilitado en cuenta admin | High | 1 | MTM. Terrero | 6 h | Remediating |
| INC-4391 | Phishing dirigido a finanzas (9 buzones) | Medium | 9 | JFJ. Fernández | 11 h | Contained |
| INC-4385 | Puerto RDP expuesto en VPS-07 | Medium | 1 | MTM. Terrero | 1 d | Fixed |
Live detections
14:41:52 BLOCK 185.220.101.4 → portal.cliente 1,204 failed logins / 60 s
14:41:31 DETECT T1110.004 password spraying · rule cred-stuff-v3 · conf 0.94
14:40:08 ACTION auto-block source ASN 43350 · 24 h · playbook PB-11
14:38:44 ENRICH 185.220.101.4 → TOR exit node · abuse score 91/100
14:22:10 DETECT vssadmin delete shadows on FS-02 · host isolated
14:22:10 ACTION FS-02 quarantined from network · 3 sessions killed
13:58:02 DETECT 2.1 GB outbound to 91.219.x.x over 40 min · user rgarcia
13:12:44 PATCH CVE-2026-1188 applied to 14 of 23 hosts
Exposure
Internet-facing assets38
Critical CVEs open9
Admin accounts without MFA2
Backups verifiedYesterday 03:10
Last restore test2026-08-03
EDR coverage96% (212 / 221)