Follow the evidence.
Published file metadata, source observations, indicators, and research history in one bounded catalog.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
3 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Review source update dates and status
- intelligence_src_21d43dfae5b42186a2Recent successful batchLast successful batch: Last attempt:
- intelligence_src_2222e97d7a26800a2dRecent successful batchLast successful batch: Last attempt:
- intelligence_src_2318b0250ae0e60375Recent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
From Web Request to Domain Compromise: Understanding the July 2026 SharePoint Attacks
First reported Jul 18, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordThe Anubis Ransomware Attack on the Adriatic Port Authority
First reported Jun 11, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordExploiting Langflow's validate_code() Endpoint for Remote Code Execution
First reported Jul 29, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordWhen AI Becomes the Attacker: Understanding Autonomous Offensive Security Agents
First reported Jul 30, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordExfilSquad Targets New Victims, Shares Data via Torrents
First reported Aug 07, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordCISA KEV Alert: Cisco, Citrix, and Fortinet Vulnerabilities Under Active Exploitation
First reported Sep 11, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordInside OWAReaper: How CVE-2026-42897 Enables Persistent Exchange Mailbox Compromise
First reported Aug 02, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordCybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise
First reported Jun 16, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordRay CVE-2025-62593: Critical Browser-Driven RCE via DNS Rebinding
First reported Aug 18, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordIron Man & YamStore: Powering a Global Phishing-as-a-Service Ecosystem
First reported Oct 14, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordCVE-2026-48282: Adobe ColdFusion RDS Path Traversal Leading to RCE
First reported Jul 06, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordReconnaissance in the Age of AI: Exploring Modern ML Infrastructure
First reported Jun 29, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordSession Cookie Authentication Bypass: Predictable Signing Secret Enableds Account Impersonations
First reported Oct 01, 2026 05:00 UTCCatalog metadata updated Oct 15, 2026 07:41 UTCOpen evidence recordSlackware Expat Significant Buffer Overflow Correction 2026-286-01
New expat packages are available for Slackware 15.0 and -current to fix security issues.
First reported Oct 14, 2026 00:08 UTCCatalog metadata updated Oct 15, 2026 07:38 UTCOpen evidence recordSlackware 15.0 Mozilla Thunderbird Security Update SSA-2026-273-02
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
First reported Oct 01, 2026 00:57 UTCCatalog metadata updated Oct 15, 2026 07:38 UTCOpen evidence recordSlackware 15.0 libarchive Security Update SSA-2026-287-01
New libarchive packages are available for Slackware 15.0 and -current to fix security issues.
First reported Oct 14, 2026 21:48 UTCCatalog metadata updated Oct 15, 2026 07:38 UTCOpen evidence recordSlackware Mutt Critical Out-Of-Bounds Memory Corruption Fix 2026-282-01
New mutt packages are available for Slackware 15.0 and -current to fix security issues.
First reported Oct 09, 2026 23:30 UTCCatalog metadata updated Oct 15, 2026 07:38 UTCOpen evidence recordSlackware 15.0 cups Important Job Status Issues Fix SSA-2026-278-01
New cups packages are available for Slackware 15.0 and -current to fix security issues.
First reported Oct 05, 2026 23:11 UTCCatalog metadata updated Oct 15, 2026 07:38 UTCOpen evidence recordThe First Reduction in Their History: 64-Day Let's Encrypt Certificates
I remember being in the room at DEF CON 23 in Las Vegas, in 2015, listening to "Let's Encrypt – Minting Free Certificates to Encrypt the Entire Web". It was still months before Let's Encrypt would launch their public beta and begin cementing 90-
First reported Oct 09, 2026 09:38 UTCCatalog metadata updated Oct 15, 2026 07:36 UTCOpen evidence recordNo Hacking Required: The Manchester Airports Group Data Breach
On 27 August 2026, Manchester Airports Group told customers that "an unauthorised third party" had stolen their data. Car park bookings, lounge bookings, Fast Track purchases for airport security and passport control, along with airport WiFi sign-ups across Manchester, Stansted and East Midlands. Roughly 8.8 million
First reported Sep 07, 2026 09:13 UTCCatalog metadata updated Oct 15, 2026 07:36 UTCOpen evidence recordDBSC Beta at Report URI
This week, I published a blog post about Device Bound Session Credentials, a new technology that will significantly hamper the efforts of Infostealers and reduce the damage caused by stolen cookies. Today, we're announcing the beta of DBSC at Report URI!Device Bound Session CredentialsYou should definitely
First reported Jun 05, 2026 14:22 UTCCatalog metadata updated Oct 15, 2026 07:36 UTCOpen evidence recordThe Instructure Canvas Breach (2026): How XSS in a Support Ticket Compromised 275 Million Students
A single support ticket became the front door to 275 million student records. The Canvas breach shows how quickly untrusted user content can become a serious security incident when it is rendered inside privileged internal tooling. This was not an exotic attack chain; it was stored XSS, over-scoped access,
First reported Jun 15, 2026 12:21 UTCCatalog metadata updated Oct 15, 2026 07:36 UTCOpen evidence recordConnection Allowlist: a network firewall, built into the browser
Connection Allowlist is a new browser security mechanism that lets a document declare, up front, the exact set of destinations it's permitted to open network connections to. Anything not on the list is blocked by the browser before the connection leaves the machine. It's currently a
First reported Jul 08, 2026 16:11 UTCCatalog metadata updated Oct 15, 2026 07:36 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.