Geopolitical Situation Board

Global events, geolocated and read straight — Tool 62

GHOST — Grounded Handling
Of Sourced Threat-intel
build 2026.08.22-P
Reader, not analyst. Headlines, sources and links only — no summaries, no ranking, no interpretation. Cross-links are navigation, not analysis. Coverage volume is attention, not truth.   [ read the full standard ]

This is a news reader. It shows you what the world's press is reporting, geolocated, with the headline, source, date and link — nothing more. It does not summarise articles, does not rank them by importance, and does not tell you what any event means.

The cross-links are navigation, not analysis. A chip beside a region opens KEV, the Trending CVE Radar or the ICS Exposure Map filtered to something related. That is a shortcut for you, the analyst. It is not a claim that the news event caused, predicts, or relates to cyber activity. A coup in one country does not imply a campaign against your sector, and this tool will never draw that line for you. Drawing it is your job, with your own evidence.

Coverage volume is not truth. The map plots how much press coverage mentions a place, which tracks media attention — not severity, not casualties, not importance. Well-covered regions dominate; under-reported crises look quiet. Read it as an attention map and nothing else.

Region
Window
Auto
Idle.
— 0 of 0 sources 0 headlines

Coverage map — GDELT geolocated press coverage

circle area ∝ number of articles mentioning that place click a point to filter the board · click again to clear

Cross-links into your other tools

Reference crosswalk only. The groupings below are publicly attributed by CISA and vendor reporting; they are listed so you do not have to look them up, not because anything in today's feed implicates them. Nothing here is generated from the news.

Source status

Nothing pulled yet.
Toggle sources
If everything failed at once

Every source failing simultaneously is a transport problem, not a dozen simultaneous outages. With a Worker set: check the Worker is up (?version) and that its ?url= allowlist covers these hosts. Without one: the tool fell back to public CORS proxies (allorigins / corsproxy / codetabs), which corporate networks routinely block — set the Worker. A handful of individual failures is different: those are usually feeds that moved or retired, and the names are listed above so you can prune them.