Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
49 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
src_2c765211cad1488dc0Collection status unverifiedLast successful batch: Unverified
src_d11443da85ea659d49Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
This scenario describes a potential data exfiltration technique using AWS CloudTrail. An attacker with access to CloudTrail logs could potentially extract sensitive information from logged events, including API calls and data modifications. This poses a risk to data confidentiality and could lead to unauthorized access to sensitive information.
First reported Dec 20, 2023 00:00 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
A flaw in AWS Bedrock's foundation model access control allowed unauthorized subscriptions to certain models, bypassing IAM policies using the aws-marketplace:ProductId condition key. This could lead to compliance issues and financial risks. AWS has since fixed the issue and notified affected customers.
First reported Mar 27, 2024 00:00 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
A vulnerability in Microsoft Dynamics 365 Supply Chain Visibility allowed arbitrary takeover of Azure tenants via a malicious reply URL. Clicking a link could grant an attacker directory read access or full tenant control if clicked by a Global Admin, without requiring user consent.
First reported Apr 26, 2024 00:00 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
A vulnerability in AWS Temporary Elevated Access Management (TEAM) allows users to modify valid requests and spoof approvals due to improper input validation. This affects versions prior to 1.2.2 of TEAM for AWS IAM Identity Center. AWS has released a fix in version 1.2.2 and recommends customers upgrade to the latest release.
First reported Mar 04, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Research uncovered security flaws in default AWS service roles, granting overly broad permissions like full S3 access. This allows privilege escalation, cross-service access, and potential account compromise across services like SageMaker, Glue, and EMR. Attackers could exploit these roles to manipulate critical assets and move laterally within AWS environments. AWS has since updated default polic
First reported Apr 29, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Palo Alto discovered that Azure CLI commands were found to leak sensitive credentials and environment variables in GitHub Actions logs. This issue affects both public and private repositories, potentially exposing secrets to unauthorized parties. The problem stems from the Azure CLI's design to echo back accessed/created/updated/deleted resource information, which can include sensitive data. Later
First reported Nov 14, 2023 00:00 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Azure iPaaS services, such as Logic Apps, separate the Control Plane (management) from the Data Plane (execution), but a flaw in this model enabled undetectable data harvesting. An attacker with Azure Reader access to workflow run history can silently extract sensitive data from executions, including secrets and API responses. This is possible because execution details are exposed via the Control
First reported Feb 26, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
SafeBreach Labs researchers developed methods to leverage Microsoft Azure's Automation Service for free, undetectable cryptocurrency mining. They found three ways to execute miners: two using their own environment and Azure's resources for free, and one in a victim's environment undetected. The techniques could potentially be used for any task requiring code execution on Azure.
First reported Nov 08, 2023 00:00 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
If there’s one thing the AI software engineering world doesn’t lack, it’s benchmarks. Want to know whether an agent can The post Copilot tops GitHub’s own AI code review benchmark. An independent one tells a different story. appeared first on The New Stack.
First reported Oct 06, 2026 18:06 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Dynatrace sells software that monitors companies’ apps and infrastructure and wants its AI agents to make engineers’ jobs easier. An The post Dynatrace wants its AI agents to fix problems instead of adding alerts appeared first on The New Stack.
First reported Oct 05, 2026 19:06 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
When David Robinson joined OpenAI in May 2023, the day after Sam Altman first testified before the Senate, the company’s The post OpenAI’s former safety lead says it’s shipping “new capability and risk every Tuesday” appeared first on The New Stack.
First reported Oct 07, 2026 18:18 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Palo Alto Networks introduced a new approach to AI-driven observability last week, signaling a shift from dashboards and manual incident The post XCOR launches to trace outages in minutes. It still pages engineers. appeared first on The New Stack.
First reported Oct 05, 2026 15:04 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Guardrail selection has typically meant choosing between a purpose-built classifier and an LLM acting as a judge. Decision models such The post The AI safety check that runs on a laptop and nearly matched a 35B model appeared first on The New Stack.
First reported Oct 05, 2026 18:36 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
OpenAI has announced that developers can now opt in to watermarking text generated through its API, as the company extends The post OpenAI brings text watermarking to its API — and unlike Anthropic, it’s off by default appeared first on The New Stack.
First reported Oct 05, 2026 19:29 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
This week, Anthropic announced an expansion of its Cyber Verification Program (CVP), breaking access into three use case–based tiers and The post Claude’s cyber safeguards are getting more flexible — but not for everyone. appeared first on The New Stack.
First reported Oct 07, 2026 21:25 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Back in 2018, a scrappy startup called OpenAI used Kubernetes to balance compute loads across its own data centers and The post The CNCF is graduating projects faster than ever. AI agents are helping with the due diligence. appeared first on The New Stack.
First reported Oct 06, 2026 20:02 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Software vendors like to claim unified systems that act as a so-called single pane of glass for any given coding The post OpenSearch veterans launch Infino. Here’s why it matters for agent builders. appeared first on The New Stack.
First reported Oct 07, 2026 14:25 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Google released EmbeddingGemma 2 on Tuesday, putting text, code, image, video, and audio retrieval into a 740-million-parameter open model that The post Your phone’s vector index might be bigger than the AI model running it appeared first on The New Stack.
First reported Oct 06, 2026 18:53 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Security operations centers have struggled with alerts for years, and AI agents offer a new way to tackle it: let The post How much control should AI get? Inside the SOC autonomy question appeared first on The New Stack.
First reported Oct 06, 2026 17:38 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
OpenAI’s 28-day Codex shipping sprint has its first result, which means subscribers hoping for a free usage reset will have The post Developers are secretly hoping OpenAI fails to ship this month appeared first on The New Stack.
First reported Oct 05, 2026 21:49 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
OpenAI launched GPT-6.1 Sol on September 29, just a week after it launched GPT-6 Sol. OpenAI marketed 6.1 as an The post GPT-6.1 Sol vs. GPT-6 Astra: Same accuracy at 18% of the cost appeared first on The New Stack.
First reported Oct 07, 2026 14:17 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Artificial intelligence has changed almost every aspect of software development and cybersecurity. But perhaps one of the most profound changes The post AI is speeding up exploits. Vulnerability spreadsheets can’t keep up. appeared first on The New Stack.
First reported Oct 03, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
I’m Matt Burns, Chief Content Officer at Insight Media Group. Each week, I round up the most important AI developments, The post Anthropic’s answer to Dots and Muse is already inside Claude appeared first on The New Stack.
First reported Oct 03, 2026 10:11 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
Earlier this year, at its Sapphire conference, SAP outlined its plans for an “Autonomous Enterprise” run in large part by The post “There is just not a room for error”: SAP is putting its AI agents in the back office appeared first on The New Stack.
First reported Oct 06, 2026 16:38 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record
The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.