Cyberattaque.org

https://www.cyberattaque.org/feed/

French-language real-time cyberattack / hacktivist-DDoS incident tracker. Surfaced by W2 (2026-W25) as the in-window primary for the NoName057(16) G7 Evian / Haute-Savoie DDoS coverage; useful France-nexus EU public-sector hacktivist-incident source. Candidate awaiting human review. | 2026-07-05 admiralty audit: C (MEDIUM->C), community breach-claim tracker (re-reports leak-site claims, corroboration required). Keep candidate: live and useful France-nexus lead source but claim-based; awaiting human review. | 2026-08-02: promoted candidate -> active. The state digest listed it as promotion_due (3 contributing runs) and it contributed again this run as the primary for the CCI Nice Cote d'Azur eDRH breach entry. | 2026-09-07: second independent reviewer (alongside frenchbreaches) of the ChimeraZ/Aveyron leak, explicitly contradicting frenchbreaches' access-vector claim rather than repeating it; S4 independently suggested this as a new candidate, not realizing it was already tracked (active since 2026-08-02), no duplicate added. | 2026-10-07 (S2): the feed falls back to the jina reader and its items are undated. | 2026-10-11: the direct transport fails and the feed is read only through the reader with undated items; `extract https://www.cyberattaque.org/` (served by the reader) returns the dated front-page listing, so the health check now reads that instead of the feed URL. | 2026-10-11: fetch_method pinned to jina because both the feed and the front page are readable only through the reader (direct transports fail); the health check therefore reads the front-page extract (health_cmd), since the reader-served feed items carry no dates or security vocabulary. | 2026-10-20 (2026-10-20T0256Z-intel) S2: `url --direct https://www.cyberattaque.org/feed/` now returns the dated RSS XML on the direct transport (10 items with pubDate); article pages read with `extract`. fetch_method moved from jina to bridge, so the reader is no longer needed; the health check reads the feed. | 2026-10-22 (main): the sweep flag of 2026-10-22 was transient: `url --direct https://www.cyberattaque.org/feed/` returned the feed minutes later. | 2026-10-24 (S2): the feed returns only the newest 10 items (about 2 days), so a 97-hour lookback cannot be covered from the feed alone; the Swiss-relevant items in it this window were the two Caisse des Dépôts / Ircantec posts. | 2026-11-03 (S2): the feed returns 10 items spanning about 14 h, so a 122 h lookback cannot be covered from it; relevance to the Swiss constituency is low (French commune and retail relays).