Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
4 sources: 0 stale, 0 needing attention, 0 paused, 4 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
Run the CLI in autopilot mode and take your chances
First reported Oct 06, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordStrands Box is the latest open source AI control tool from the cloud giant; like its predecessors, it promises tighter reins on autonomous agents
First reported Oct 07, 2026 17:42 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordCompany's Project Glasswing and Cyber Verification Program metamorphose into triple tier threat hunting club
First reported Oct 06, 2026 23:29 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordAnother few bite the dust
First reported Oct 05, 2026 17:46 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordRogue notification claims Snowflake instance compromised, but customer info theft remains unverified
First reported Oct 06, 2026 11:51 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordYou didn't really want to be sending around .msix and .msixbundle files, did you?
First reported Oct 06, 2026 15:06 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordTells users ‘action required’ – but maybe don’t make that action a Jira ticket, because it has this bug
First reported Oct 06, 2026 04:20 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordClearFake is the clear-cut number one again and Kali365 debuts in this month’s edition of Intelligence Insights
First reported Jun 18, 2026 17:49 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordDefenders don’t need to detect every adversary action to prevent a threat. Here’s a more realistic, optimized approach to testing.
First reported May 28, 2026 13:13 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordLearn how Red Canary engineered a super agent—blending ML, a rules engine, similarity, agentic AI, and LLMs—to classify phishing emails.
First reported Jun 30, 2026 12:33 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordAssistive AI agents aren't always helpful—it all depends on who they're working on behalf of.
First reported Jun 08, 2026 15:37 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordClearFake claims the crown again and CastleLoader debuts in this month’s edition of Intelligence Insights.
First reported Jul 23, 2026 17:12 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordWe offer a practical roadmap for evolving informal, ad hoc threat hunting practices into a mature, scalable program
First reported Jun 11, 2026 13:09 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordEntra ID agent users can send malicious content to human users via Microsoft Teams. Here’s what to look out for.
First reported Jun 01, 2026 13:04 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordRed Canary's monthly roundup of upcoming security conferences and call for papers (CFP) submission deadlines June 2026
First reported Jun 01, 2026 18:59 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordA comprehensive guide to the most commonly abused RMM tools, including technical guidance for detection and prevention
First reported Jun 17, 2026 16:15 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordDebuts, departures, and danger on the blockchain in this month’s edition of Intelligence Insights.
First reported Aug 20, 2026 20:09 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordHow a recent Supreme Court decision on geofencing influenced a federal judge to toss a sheriff's Flock camera evidence in a drug trafficking case.
First reported Oct 07, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordU.S. officials say Zhang Yu was a prominent figure in the Hafnium campaign, which saw hackers breach thousands of computers and steal troves of documents.
First reported Oct 07, 2026 19:50 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordThe investigation into the incident revealed cybercriminals were able to breach the Fines/Fees and Restitution Enforcement (FARE) Program, a statewide program that helps the court collect outstanding debts tied to traffic and criminal violations.
First reported Oct 07, 2026 18:31 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordLawmakers who oversee military cyber policy as well as the Fort Meade, Maryland, hub for those agencies say an $11 million mental health program should be locked in to defense spending legislation.
First reported Oct 07, 2026 18:35 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordThe Operational Technology Cybersecurity Coalition released a white paper urging the CISA to create a new directive centered around operational technology, which is used to monitor and control critical infrastructure.
First reported Oct 07, 2026 14:03 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordProactive AI acts without a prompt and powers Meta’s Muse and Instinct's viral AI agent. Learn how proactive agents work and what they cost your privacy.
First reported Oct 01, 2026 08:27 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordMeta's Muse AI agent shared a Facebook Marketplace seller's home address with a buyer without asking. Here's what happened.
First reported Sep 30, 2026 20:02 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.