A505.1: Active Attack Incidents