AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations, indicators, and research history in one bounded catalog.

2,400+Reachable catalog records
29 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

3 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.

Review source update dates and status
  • intelligence_src_b333b9cf626c52d467Recent successful batchLast successful batch: Last attempt:
  • intelligence_src_b345c691c6a54b7290Recent successful batchLast successful batch: Last attempt:
  • intelligence_src_b35573840dfc5ce6daRecent successful batchLast successful batch: Last attempt:

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.

Clear filters
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
REPORT1 SOURCE

CVE-2026-107352 - Missing authorization checks in Amazon Athena engine version 3 request handling

Bulletin ID: 2026-128-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/07/2026 13:00 PM PDT Description: Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata (AWS account identifiers and SQL statement text) from other AWS accounts. AWS remediated the issue on September 1, 2026, and has confirmed no customer metadata was accessed. Query results, credentials, and Amazon S3 data were not affected. No customer action is required. Resolution: This issue was addressed service-side on September 1, 2026. Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

First reported Oct 07, 2026 20:19 UTCCatalog metadata updated Oct 14, 2026 14:33 UTCOpen evidence record
REPORT1 SOURCE

CVE-2026-86830 - Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Bulletin ID: 2026-112-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/14/2026 10:45 AM PDT Description: Temporary Elevated Access Management (TEAM) is an open source AWS sample solution for managing temporary elevated access via AWS IAM Identity Center. We identified CVE-2026-86830, where an authenticated user with application-level access could gain unintended temporary elevated access to AWS accounts managed by TEAM. Impacted versions: <1.5.1 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

First reported Sep 14, 2026 18:04 UTCCatalog metadata updated Oct 14, 2026 14:33 UTCOpen evidence record
REPORT1 SOURCE

CVE-2026-107783 - Insertion of sensitive information into log file in AWS Tools for PowerShell

Bulletin ID: 2026-132-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/09/2026 08:30 AM PDT Description: AWS Tools for PowerShell V5 lets developers and administrators manage their AWS services from the PowerShell scripting environment. We identified CVE-2026-107783, where insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. Impacted versions: <= v5.0.305 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

First reported Oct 09, 2026 15:56 UTCCatalog metadata updated Oct 14, 2026 14:33 UTCOpen evidence record
REPORT1 SOURCE

2.19.4.0

[2.19] Copy security-analytics-commons-1.0.0.jar from main branch (#1…

First reported Oct 31, 2025 21:00 UTCCatalog metadata updated Oct 14, 2026 14:32 UTCOpen evidence record
REPORT1 SOURCE

3.6.0.0: [AUTO] Add release notes for 3.6.0 (#1687)

Add release notes for 3.6.0 Signed-off-by: opensearch-ci opensearch-infra@amazon.com Update opensearch-security-analytics.release-notes-3.6.0.0.md Signed-off-by: Peter Zhu zhujiaxi@amazon.com Signed-off-by: opensearch-ci opensearch-infra@amazon.com Signed-off-by: Peter Zhu zhujiaxi@amazon.com Co-authored-by: Peter Zhu zhujiaxi@amazon.com

First reported Apr 04, 2026 04:06 UTCCatalog metadata updated Oct 14, 2026 14:32 UTCOpen evidence record
REPORT1 SOURCE

3.8.0.0

Add ci.opensearch.org/m2/ mirror to buildscript and project repos (se…

First reported Aug 01, 2026 17:30 UTCCatalog metadata updated Oct 14, 2026 14:32 UTCOpen evidence record
REPORT1 SOURCE

3.9.0.0

[Backport 3.9] Update security-analytics-commons jar to netty 4.1.138…

First reported Sep 22, 2026 22:54 UTCCatalog metadata updated Oct 14, 2026 14:32 UTCOpen evidence record
REPORT1 SOURCE

3.4.0.0: createUser func fixed ad part of Security tests (#1623) (#1624)

gradle and jdk upgrade gradle and jdk upgrade updating build tools in maven updating build tools in maven fix security tests (cherry picked from commit 01340b0) Signed-off-by: Riya Saxena riysaxen@amazon.com Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

First reported Dec 15, 2025 03:29 UTCCatalog metadata updated Oct 14, 2026 14:32 UTCOpen evidence record

The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.

A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.