Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations, indicators, and research history in one bounded catalog.

2,400+Reachable catalog records

100 / 100Current catalog page

24Maximum records per page

0Samples downloaded by this page

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

2 sources: 0 stale, 0 needing attention, 0 paused, 2 unverified.

Review source update dates and status

src_2318b0250ae0e60375Collection status unverifiedLast successful batch: Unverified
src_294c5c73332026c4ecCollection status unverifiedLast successful batch: Unverified

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.

2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED

REPORT1 SOURCE

CVE-2026-65400: macOS Screen Sharing Authentication Bypass Under Active Exploitation

First reported Aug 25, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

CISA KEV Alert: Cisco, Citrix, and Fortinet Vulnerabilities Under Active Exploitation

First reported Sep 11, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Inside OWAReaper: How CVE-2026-42897 Enables Persistent Exchange Mailbox Compromise

First reported Aug 02, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Ray CVE-2025-62593: Critical Browser-Driven RCE via DNS Rebinding

First reported Aug 18, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

From WSProxy to Root: INC ransomware and SonicWall SMA Exploit Chain

First reported Aug 01, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

CVE-2026-16812: Critical Command Injection in Arista VeloCloud Orchestrator

First reported Aug 06, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Session Cookie Authentication Bypass: Predictable Signing Secret Enableds Account Impersonations

First reported Oct 01, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

When AI Becomes the Attacker: Understanding Autonomous Offensive Security Agents

First reported Jul 30, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

CVE-2026-48282: Adobe ColdFusion RDS Path Traversal Leading to RCE

First reported Jul 06, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Exploiting Langflow's validate_code() Endpoint for Remote Code Execution

First reported Jul 29, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

CVE-2026-20253: Splunk Enterprise Pre-Authentication Remote Code Execution

First reported Jun 16, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Reconnaissance in the Age of AI: Exploring Modern ML Infrastructure

First reported Jun 29, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

The LiteLLM Supply-Chain Attack — TeamPCP “SANDCLOCK” CI/CD Credential-Harvesting Campaign via a Backdoored Trivy GitHub Action

First reported Aug 14, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Metabase Zero-Day Exploited in the Wild: Unauthenticated SQL Injection Leading to Full Admin Access

First reported Aug 10, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Silent Ransom Group (SRG): Uncovering DNS Fast Flux Infrastructure

First reported Jun 05, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

ExfilSquad Targets New Victims, Shares Data via Torrents

First reported Aug 07, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

The Anubis Ransomware Attack on the Adriatic Port Authority

First reported Jun 11, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Artificial Intelligence Safety Law: Landmark Industry Regulation Bill

First reported Jul 07, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

From Web Request to Domain Compromise: Understanding the July 2026 SharePoint Attacks

First reported Jul 18, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise

First reported Jun 16, 2026 05:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

The Fake Treasury Playbook - How Protocols Inflate Their War Chests

Behind flashy treasury dashboards lie recycled tokens, illiquid assets, and deceptive accounting — in Web3, war chests are often just smoke and mirrors crafted to inspire trust, not to fund survival.

First reported Apr 28, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Social Recovery Wallets are Broken by Design

Social recovery sounds like a friendly safety net — until it isn't. In reality, it hands your security over to the very humans crypto was built to eliminate from the trust model. A UX-driven mirage of safety masks the vulnerabilities of guardianship, turning recovery into the ultimate attack vector.

First reported Jun 09, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Why Privacy Matters More Than Ever in 2026

Privacy is no longer a cypherpunk slogan - it’s turning into core blockchain infrastructure. Public blockchains proved they can move money quickly, but they also expose balances, relationships, and behavior permanently. The next wave of networks isn’t competing on speed or fees, but on who can protect financial data without hiding everything.

First reported Feb 23, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

REPORT1 SOURCE

Transparent When You Want It, Private When You Need It

Public blockchains solved settlement. They didn't solve privacy. Institutions need to protect positions, counterparty relationships, and transaction amounts without abandoning transparency entirely - and every architecture that tried to solve this hit the same wall. Protocol-level privacy locks everything. Permissioned chains recreate centralization. Separate privacy layers fragment liquidity. Ste

First reported Apr 09, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:49 UTCOpen evidence record

The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.

A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.