Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
TrickBot kicked into high gear coming into August with the most targeted URLs since its launch. It released a new worm module, shifted its focus towards the US, and soared past the one thousand target URL mark in a single configuration.
First reported Sep 14, 2017 07:00 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordFaced with competing pressures, CISOs are ultimately the experts at assessing what’s truly at stake in their organizations.
First reported Feb 14, 2017 08:00 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordThe three most effective steps you can take in under an hour to guard against identity theft.
First reported May 21, 2020 22:00 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordWith “thingbots” now launching Death Star-sized DDoS attacks, hosting banking trojans, and causing physical destruction, all signs point to them becoming the attacker infrastructure of the future.
First reported Aug 09, 2017 07:00 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordCritical lessons can be learned from others’ mistakes. Don’t learn the hard way; heed the warnings from our research.
First reported Jan 31, 2018 08:00 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence record27 new CVEs, and continued IoT targeting. See what's new from February 2024.
First reported Mar 28, 2024 09:05 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordNo single defense is perfect, but with the right set of diverse, overlapping controls, most threats can be rebuffed.
First reported Nov 02, 2018 12:36 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordA detailed look at an 840-Gbps DDoS attack on a financial services provider and a deeper dive into attacking nodes.
First reported Aug 23, 2021 17:52 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordExisting fraud tricks are finding new use in buy now, pay later payment systems.
First reported Aug 05, 2021 17:00 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordLast issue, we observed huge amounts of scanning for the rather old CVE-2017-9841, an RCE in PHPUnit. This time it’s fallen off nearly as sharply. We look into why!
First reported Aug 22, 2024 09:38 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordThe TP-Link Archer AX21 Wifi Router vulnerability CVE-2023-1389 experiences massive targeting along with a rather old critical RCE in PHPUnit.
First reported Jun 21, 2024 07:16 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordIP addresses assigned in Russia launched significantly more attacks against Middle East systems than any other regions of the world.
First reported Nov 21, 2019 16:52 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordThis is the quick espresso-style rundown on the 2018 threat landscape. This summary boils down the trends in the application threats, as well as our recommendations for managing application risk as it evolves.
First reported Nov 05, 2019 18:37 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordCloud security is not as straightforward as we’ve been led to believe, but it’s achievable by focusing first on control objectives instead of controls.
First reported Aug 16, 2019 18:23 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordFar from a minor annoyance, reseller bots create significant problems for manufacturers and retailers. Learn how we got here, why they’re such a problem, and what we can do about it.
First reported Dec 16, 2022 16:06 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordEurope was Canada’s primary source of attack traffic targeting VoIP systems and web applications.
First reported May 28, 2019 12:38 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordPrivacy today isn’t just about staying away from prying eyes. The very act of communicating across the Internet with open, non-confidential protocols invites exposure to multiple threat types.
First reported Apr 23, 2018 18:15 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordTP-Link Archer AX21 Wifi Router targeting, plus a handful of new CVEs! See what mass scanning looks like in March 2024.
First reported Apr 30, 2024 09:06 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordCybersecurity regulators have recently levied huge fines against financial institutions and healthcare organizations. Is this the new normal?
First reported Nov 03, 2020 19:29 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordThe latest DDoS trends include the return of large volumetric DDoS attacks, the rise of application targeted attacks, and businesses in Europe and Asia are growing targets.
First reported Apr 06, 2018 07:00 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordSimilar to April and May, threat actors in June continued targeting the deserialization vulnerabilities found in Oracle WebLogic to mine cryptocurrency.
First reported Jul 31, 2019 17:40 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordWe are excited to announce a new report covering threats to digital identities. This report goes into detail on credential stuffing, phishing, and multifactor authentication bypass techniques.
First reported Nov 01, 2023 10:20 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordInvestigating a schema parsing concern in the parquet-avro module of Apache Parquet Java.
First reported May 05, 2025 20:23 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordBot traffic for the first half of 2023 was fairly typical, some rapid change in a few industries notwithstanding. Learn who got hit hard and who got off easy.
First reported Aug 15, 2023 11:29 UTCCatalog metadata updated Oct 13, 2026 21:32 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.