Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
3 sources: 0 stale, 0 needing attention, 0 paused, 3 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
Most LLM testing tools require setup, paid access, or internet; LLMHaxor requires none of that. In this blog, we walk through the latest update, including a new WebSocket adapter for modern streaming LLM applications.
First reported Sep 03, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordYou thought you knew hate_crack 👀 Well, version 2.0 changed that. In Part 1 of this latest blog series, we go through 13 new attack methods, menu restructuring, and local LLM integration.
First reported Sep 24, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.How's that view?! With NDC Oslo now done, it's a little bit of sightseeing before heading to Denmark for GOTO in Copenhagen for Scott's and my "Cyber-broken" talk. In the meantime, this week is mostly about the ShinyHunters trajectory targeti
First reported Sep 28, 2026 07:24 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.The Origin Energy breach down here in Aus is all over the news this week, and as with many breaches, it's multi-faceted. You've got them leading with "don't worry, your credit card is fine", the hacker leading with "they didn&
First reported Jul 26, 2026 09:14 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.It does feel like I've bitten off too much and am now chewing like crazy this week. The 3D printing talk with Elle in Oslo, the "normal" NDC infosec talk, the cyber-broken talk with Scott in Copenhagen and then those ratbag hackers keep dumpi
First reported Sep 01, 2026 22:26 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.Today, we welcome the 47th government onboarded to Have I Been Pwned’s free gov service: Nepal. Their National Cyber Security Centre now has access to monitor Nepalese government domains against the data in HIBP. This gives the NCSC the abili
First reported Aug 03, 2026 06:38 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.Apparently, Aussies are so obsessed with coffee that it's referred to as the coffee capital of the world down here (some bits, at least). "But what about Italy?" people ask. Having spent a lot of time in a lot of Italy, no, it's just
First reported Aug 03, 2026 00:07 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I think what really resonates with me this week is being able to completely turn the tables on perceptions around things like AI being the big bad hacking tool the news would have you believe. There's the stat I talk about where it's had lite
First reported Sep 11, 2026 20:37 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I reckon this week's video on how Claude is tying together info from UniFi, Home Assistant and the Pi-Hole is an absolute ripper. Or at least the concept is - if ever there was an actual value proposition for AI it's taking lots of noise and
First reported Jul 21, 2026 07:30 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.Heads up: the first 7 mins is a bit quiet until we worked out the external mic was misbehaving - sorry! But get through that and have a listen to Scott's experiences with how Report URI is identifying malware-infected machines within orgs, al
First reported Sep 23, 2026 05:18 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.Today, we welcome the 48th government onboarded to Have I Been Pwned’s free gov service: Sri Lanka. Sri Lanka CERT now has access to monitor Sri Lankan government domains against the data in HIBP, helping identify exposed government accounts
First reported Aug 23, 2026 06:39 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.The current ransomware situation is a bit of a kludge (deep breath): a lot of ransomware (which often doesn't even involve "ware", it's just extortion) is carried out by kids who successfully make a truckload of money but can't spend it witho
First reported Aug 18, 2026 03:44 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I genuinely think I've nailed the IoT door lock situation! Well, Ubiquiti has, but I think I've worked out how to put it all into a residential house and have it make sense. There are a few basic tenets:Main power (never have to rely on
First reported Aug 24, 2026 04:19 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.You're not going to believe this, but turns out you can't always take criminals at their word. Actually, I'll walk that back a bit as it may not even be the cybercrime guys who got this wrong, but it all starts here: 🚨Cyber
First reported Aug 25, 2026 21:51 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I've started playing around with YouTube's "create video thumbnail", which hopefully will give me back a bit of time in my day (it used to be a manual job in Photoshop) and be a bit more interesting. And on that note, the imagery it&
First reported Sep 06, 2026 23:31 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.A little wind noise, a little connectivity flakiness, and a little lip-sync issues from YouTube, but look at that view! 🤩 Back to business, it's the Brinks Home FAQ I found most interesting this week. I mean, how do you write your own FAQ the
First reported Aug 12, 2026 08:16 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPresently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I'm in Denmark! Well, just, I'm now at Copenhagen airport ready to begin the long trek home, with the final event at GOTO now done and going just perfectly. This week, there are two ShinyHunters arrests in the news: Pepijn in the Netherlands
First reported Oct 04, 2026 11:52 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordFile hash published by the cited source.
First reported Oct 02, 2026 11:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordWe’re running Patch the Planet, an ongoing collaboration with OpenAI that pairs Trail of Bits engineers directly with more than 30 open-source projects. Its goal is to front-run a serious problem facing open-source maintainers: highly capable models like GPT-5.5-Cyber will soon create a firehose of bug reports, and OSS maintainers are already spread thin. Our plan is to point OpenAI’s latest model
First reported Jul 02, 2026 11:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordWhat happens when the bits of an RSA private key are heavily biased toward 0 instead of being randomly generated? The public key’s bits could be biased enough for us to detect these incorrectly generated keys in the wild. Together with Hanno Böck of the badkeys project, we found hundreds of unique keys that not only have this property, but can be quickly factored. We also found the bug that led to
First reported Jun 12, 2026 11:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIn March 2026, attackers exploited a pull_request_target misconfiguration in the aquasecurity/trivy-action GitHub Action to exfiltrate organization and repository secrets, then used those credentials to backdoor LiteLLM on PyPI (see Trivy’s post-mortem for the full timeline). zizmor is a static analyzer that GitHub Actions users run to catch exactly these misconfigurations before they ship. When G
First reported May 22, 2026 11:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordFile hash published by the cited source.
First reported Oct 02, 2026 11:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordCodex’s /goal feature amplifies bug hunting, but getting good results requires the right prompt, the right scope, and the right number of outcomes per run. For Patch the Planet, our joint initiative with OpenAI to find and fix bugs in open-source software, we pointed Codex at some of the most widely used, heavily audited codebases in the world, like Rust, curl, and zlib. One tool came up again and
First reported Jul 28, 2026 11:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 25, 2026 11:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.