AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← Malware catalog

Attributed metadata history

REPORTPUBLIC METADATA

v4.25.0 (LTS)

What's Changed Important ⭐ These below fix CVE-2026-33691: fix(933111): prevent whitespace padding bypass in PHP double-extension upload by @fzipi in #4547 fix(933110): prevent whitespace padding bypass in PHP upload detection by @fzipi in #4546 fix(944140): prevent whitespace padding bypass in JSP file upload detection by @fzipi in #4548 🆕 New features and detections 🎉 feat(930130,930140): expand AI-based paths by @Elnadrion in #4540 feat: add aws security agent in scanners-user-agents.data by @S0obi in #4562 feat(932390): add shell fork bomb detection rule at PL2 by @fzipi in #4563 🧰 Other Changes refactor: create 941250 .ra file by @fzipi in #4520 refactor: create 942220 .ra file by @fzipi in #4511 refactor: create rule 931100 and 931110 .ra files by @Xhoenix in #4489 feat: Adding critical ai dirs that previously not exist by @HackingRepo in #4535 refactor: create 933140 and 933180 .ra files by @Xhoenix in #4488 fix(944110,944120,944130,944150,944151,944200,944210,..): don't inspect cookies twice by @touchweb-vincent in #4526 refactor: create 943120 .ra file by @fzipi in #4506 fix: false negative 932236 by @franbuehler in #4544 feat: update list of unix commands by @EsadCetiner in #4446 fix(932180): prevent whitespace padding bypass in restricted file upload detection by @fzipi in #4549 fix: harden GitHub Actions workflows by @fzipi in #4553 refactor: create 941310 .ra files by @fzipi in #4522 docs: update README by @fzipi in #4556 refactor: create 941120 .ra file by @fzipi in #4498 fix(920540): allow rule exclusions for specific targets by @EsadCetiner in #4405 fix(931130): ensure correct target is logged by @EsadCetiner in #4577 Full Changelog: v4.24.1...v4.25.0

Reference details

Source category
research-report
First reported
Mar 28, 2026 22:19 UTC
Last reported
Mar 28, 2026 22:19 UTC
Catalog updated
Oct 14, 2026 11:29 UTC
Record ID
12194f8cf930fc0eb30b05384466a44dd8ef099496377d64e79cd907fa48e591

Published indicators

Network indicators are visibly defanged. This page does not make them clickable or send them to another service.

No validated file hashes or network indicators are stored for this record.

Source observations

intelligence_src_732996d4d78decf6b7

Source-provided label
Publisher RSS metadata
Evidence class
mentioned in report
Confidence
Not reported
Observed
Mar 28, 2026 22:19 UTC
Retrieved
Oct 14, 2026 11:29 UTC

This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.

Review source update dates and status
  • intelligence_src_732996d4d78decf6b7Recent successful batchLast successful batch: Last attempt:

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.