Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
APIs have become critical for business online, but they are also leading to more security incidents, most of which should have been preventable.
First reported Jul 31, 2020 14:57 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordLearn which CVEs are top of mind for attackers this autumn.
First reported Oct 24, 2022 20:14 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordSo far, we’ve seen IoT DDoS attacks on a Death Star scale. What's next for those of us that may be caught in the blast?
First reported Jan 17, 2017 08:00 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordSome IoT vulnerabilities, some Microsoft Exchange vulnerabilities, but not too much going on in March.
First reported Apr 25, 2023 17:33 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordWe’ve all seen after-the-fact security camera footage of a wide variety of crimes splashed across social media and news sites. This visibility is a critical component of any judicial system, as it helps identify who did what and provides crucial, objective evidence of what actually happened.
First reported Nov 14, 2016 08:00 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordWith the vast availability of new exploits and the competition for victims’ resources, the multi-exploit trend continues to be popular among attackers.
First reported Jun 21, 2018 07:00 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordMore and more CISOs are finding themselves pulled into the sales cycle to defend and sell their security programs. Here’s how to do it right.
First reported May 23, 2017 07:00 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordAttackers using IP addresses in China, the United States, and the Netherlands focus on attacking applications over SSH, SMB and HTTP.
First reported Apr 24, 2019 20:23 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordThe applications we need to run inside our organizations can turn malicious, so how can we architect for this?
First reported Mar 31, 2022 06:42 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordLatin America’s cyberattack landscape saw continued focus on port 5900 and the targeting of common web vulnerabilities.
First reported Apr 28, 2021 14:27 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordUsing existing protocols and tools to begin building a robust phishing and fraud mitigation strategy.
First reported Jan 17, 2019 19:41 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordRamnit’s latest twist includes targeting the most widely used web services during the holidays: online retailers, entertainment, banking, food delivery, and shipping sites.
First reported Jan 15, 2018 08:00 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordIndia’s attack landscape saw focus on Port 5900 and the highest number of scans from the UK.
First reported Feb 11, 2021 17:53 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordAI and Machine Learning can find the optimal cyberattack strategy by analyzing all possible vectors of attack.
First reported Dec 30, 2020 16:59 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordWeb injection represents an even greater risk than it did previously, thanks to the growth of third-party content and increasingly complex attack surfaces.
First reported May 16, 2019 13:41 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordA previously undisclosed misconfiguration vulnerability in the rTorrent client is being exploited in the wild to mine Monero.
First reported Feb 28, 2018 08:00 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordSpeed to market means IoT and mobile apps are being released with known vulnerabilities.
First reported Mar 03, 2017 08:00 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordDon’t think your company is immune from nation-state APTs going after your intellectual property. Take these essential steps to protect yourself.
First reported Jun 12, 2018 07:00 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordSensor Intel Series: December CVE-2025-55182 Trends
First reported Jan 16, 2026 17:00 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordThese are the top threats you should know about this week.
First reported Jan 28, 2026 18:31 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordPhishing attack? Absolutely. Success? Likely. Risk of incident? High. Breach costs? About $6.5 million.
First reported Nov 08, 2018 13:43 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordHow cybercriminals use credential stuffing attack tools OpenBullet and MailRanger to bypass CAPTCHA, compromise mailboxes, and reset passwords.
First reported Apr 22, 2021 06:09 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordThe Internet is full of information about your company that’s easily accessible to anyone and particularly useful to attackers.
First reported Aug 22, 2017 07:00 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordExploring OAuth exchanges for financial-grade API security in banking and financial services applications and the threat of authorization code interception attacks
First reported Dec 03, 2020 17:16 UTCCatalog metadata updated Oct 16, 2026 09:13 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.