Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
Gozi authors, who targeted banks in Canada, France, and the US in January 2019, shifted their targets to Italian banks in February 2019.
First reported Apr 30, 2019 23:08 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordLearn about authentication, authorization, and security misconfiguration in API compromises by exploring this capture-the-flag game.
First reported May 04, 2020 22:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordHow to selectively capture packets for further analysis and avoid buying a storage farm.
First reported Nov 02, 2017 07:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordThe latest evolution of cyber weapons is brought to you by the default passwords in Internet of Things (IoT) devices.
First reported Oct 08, 2016 07:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordA few formerly popular CVEs fell in traffic in August, leaving an old router vuln to resume its normal position at the top. Plus seven new CVEs added to the list of signatures.
First reported Sep 25, 2023 11:32 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordThere are three primary avenues to hack a U.S. election: voter registration, voting machines, and the voters themselves. We’ll dig into each and see which offers the most bang for the buck.
First reported Oct 22, 2019 20:12 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordKazakhstan is now asking its citizens to install digital certificates so that it can decrypt all online communications. Their methods, however, may leave the population vulnerable to cyber attacks for many years to come.
First reported Aug 01, 2019 15:17 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordIt looked like a simple XSS in the Outlook Android app, but the app developers couldn’t reproduce it so they didn’t fix it. Then things got interesting. Here’s the story of how I discovered CVE-2019-1105.
First reported Jun 21, 2019 21:41 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordLearn what attackers scanned for last month so you can tune your defenses.
First reported Sep 20, 2022 20:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordIn Part 3 of this blog series, we demonstrated modeling the threat landscape along with executive threat-modeling. In this blog, we discuss the importance of defining controls.
First reported Nov 28, 2017 08:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordThese are the top threats you should know about this week.
First reported Jul 01, 2026 18:41 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordBleichenbacher attacks will likely continue to pop up until TLS 1.3 is fully adopted, which could take years.
First reported Dec 27, 2017 08:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordBackSwap demonstrates unique behavior in its manipulation of user input fields and its handling of International Bank Account Numbers (IBANs).
First reported Jun 29, 2018 07:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordTinba, also known as "Tinybanker", "Zusy" and "HµNT€R$", is a banking Trojan.
First reported Oct 15, 2014 07:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordF5 Labs recommends security controls based on the top 2019 cyber threats. Learn how these recommendations tie into the best practices to prevent data breaches.
First reported Jan 15, 2020 16:08 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordSensor Intel Series: June 2026 CVE Trends
First reported Jun 11, 2026 21:58 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordWhen you feel like you’re losing the security battle, try one, a few, or all of these tips to re-invigorate your program and stay on a positive track.
First reported Apr 28, 2017 07:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordThe safest way to run a network is to assume it’s going to breached, but that also means minimizing your liability and ensuring the executive team is fully aware of what is going on.
First reported Jan 02, 2018 08:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordAttacks against exchanges, exit scams and nation-state threats mean that cryptocurrencies retain their Wild West character in 2019.
First reported Sep 11, 2019 19:05 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordThese are the top threats you should know about this week.
First reported Apr 29, 2026 18:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordRecently there have been several reports of a financial malware named TrickBot; this malware's code looks similar to Dyre.
First reported Nov 07, 2016 08:00 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordDon’t just check a box - done right, security awareness training can turn your users into your greatest asset.
First reported Jan 25, 2019 12:31 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordThe sheer scale of cybercrime attacks makes automated defenses a necessity. Shape's Shuman Ghosemajumder writes for VentureBeat, describing how the bad guys are also embracing automation, and what we can do about it.
First reported Nov 05, 2020 16:42 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordWebsite logins are under constant assault, with attackers quickly modifying their bots to evade simplistic defenses.
First reported Aug 26, 2020 14:13 UTCCatalog metadata updated Oct 15, 2026 16:07 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.