Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
87 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
intelligence_src_33e452677074d4c3bdRecent successful batchLast successful batch: Last attempt:
intelligence_src_350d40f2cc69277bcaRecent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes an authentication bypass vulnerability in the HTTP server implementation. The vulnerability we are disclosing in this advisory affected a wide range of TP-Link devices, including TAPO Smart Cameras. A TP-Link Security Advisory released was promised to be released in April 2026 after several delays, but this did not happen, without the vendor providing any explanation. Vulnerability Details The TAPO architecture can authenticate different account roles, one of them is the hub user. A whitelist introduced in recent builds (2025) limits this role to a few less sensitive actions.
First reported Apr 28, 2026 00:00 UTCCatalog metadata updated Oct 16, 2026 22:25 UTCOpen evidence record
Written in Go, Hugo is an open source static site generator available under the Apache Licence 2.0. Hugo supports TOML, YAML and JSON data file types, Markdown and HTML content files and uses shortcodes to add rich content. Other notable features are taxonomies, multilingual mode, image processing, custom output formats, HTML/CSS/JS minification and support for Sass SCSS workflows. Hugo makes use of a variety of open source projects including: https://github.com/yuin/goldmark https://github.com/alecthomas/chroma https://github.com/muesli/smartcrop https://github.com/spf13/cobra https://github.com/spf13/viper Hugo is ideal for blogs, corporate websites, creative portfolios, online magazines, single page applications or even a website with thousands of pages. Hugo is for people who want to hand code their own website without worrying about setting up complicated runtimes, dependencies and databases.
First reported Apr 11, 2020 11:15 UTCCatalog metadata updated Oct 16, 2026 22:25 UTCOpen evidence record
Summary There is a vulnerability in the Huawei Kirin SoC’s DDR Controller (DMSS) Access Permission system which allows the Linux kernel to bypass memory access restrictions and directly compromise multiple privileged subsystems of the SoC. As demonstrated by CVE-2021-3710, CVE-2021-39991, CVE-2021-37115, and CVE-2021-39986, read and write of critical system memory, including secure memory regions, is possible via those subsystems. Therefore, this vulnerability combined with one of CVE-2021-3710, CVE-2021-39991, CVE-2021-37115, or CVE-2021-39986 results in a fully realized chain of elevation of privileges from a kernel-level write primitive to total control of the secure world (TEE). The vulnerability was fixed in February 2022.
First reported May 18, 2022 00:00 UTCCatalog metadata updated Oct 16, 2026 22:25 UTCOpen evidence record
Summary In a previous advisory we disclosed multiple vulnerabilities within the NPU device’s mmap handler and discussed how it exposes sensitive kernel data. This advisory focuses on the implementation errors in the same handler. The mapping function ignores the requested size parameter and fails to back regions of the mapped virtual memory with an actual mapping. Trying to access these holes or requesting an mmap that is smaller than the memory mapped by the kernel driver results in a kernel crash, most likely caused by invalid page accesses. The mmap handler is exposed through the /dev/davinci0 character device. Due to the applied selinux policy, access to this device is restricted to the hiaiserver system process.
First reported Aug 02, 2021 00:00 UTCCatalog metadata updated Oct 16, 2026 22:25 UTCOpen evidence record
In this advisory we are disclosing a vulnerability in the Huawei log device that allows any unprivileged process to disclose sensitive information from the kernel. Huawei kernels are shipped with custom log devices (/dev/hwlog_dubai, /dev/hwlog_exception and /dev/hwlog_jank) that facilitate better system diagnostics through a series of ioctl calls. One of these diagnostics module is referred to as zrhung, and it provides information and configuration options to monitor hung processes. The implementation of the config set ioctl contains a race condition vulnerability that allows an attacker to free the underlying buffer that holds the configuration data. Consecutive config get ioctl calls use the dangling pointers to read and disclose, potentially sensitive, dynamically allocated kernel data.
First reported Jul 24, 2022 00:00 UTCCatalog metadata updated Oct 16, 2026 22:25 UTCOpen evidence record
Once upon a time, I started at TASZK Security Labs as an intern. My internship project was about hacking hypervisors, and the target we picked for it was Huawei’s HEE (Hypervisor Execution Environment). The research was carried out in late 2020 to early 2021. Although we didn’t publish this work all the way until 2025, it was kept relevant by the fact that the issues remained unaddressed, to the best of our knowledge. If that piqued your interest in the story of the disclosure, please check out our recent Troopers/LeHack talk titled Eastern Promises. In this blogpost, I’ll focus on the technical aspects of the project.
First reported Sep 24, 2025 00:00 UTCCatalog metadata updated Oct 16, 2026 22:25 UTCOpen evidence record
Summary The NPU device’s kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an offset to retrieve a kernel structure. Fields of the structure are written with user provided values. A malicious actor can use this vulnerability to overwrite kernel memory with controlled data. The mmap handler is exposed through the /dev/davinci0 character device. Due to the applied selinux policy, access to this device is restricted to the hiaiserver system process. Because of these limitations a practical attack would need to target the hiaiserver first. The /dev/davinci0 device exposes a series of ioctl handlers, one of which is devdrv_ioctl_load_stream_buff.
First reported Aug 02, 2021 00:00 UTCCatalog metadata updated Oct 16, 2026 22:25 UTCOpen evidence record
The sentiment gap between public and private markets could not be wider right now. Wall Street investors have been increasingly worried about overborrowing by AI-related companies, as evidenced by skyrocketing yields on CoreWeave bonds, a selloff in semiconductor stocks and the yanking of the IPO of Firmus, the Australian data center operator.Investors in private tech startups are still ebullient, blown away by how fast startups like Fireworks AI have grown. This bifurcation was evident to me this week at Morgan Stanley’s annual private tech companies conference. The mutual fund and other investors fanning out across a lush seaside resort in Dana Point, Calif., were aware of the red washing over trading screens. But that didn’t prevent them from rushing to meet the dozens of startup founders there, particularly if they were in the hot defense or inference sectors. “You can see there's a stark disconnect between the public markets and the private markets,” said Diana Doyle, Morgan Stanley’s head of technology equity and equity-linked capital markets on the sidelines of the conference.
First reported Oct 16, 2026 00:37 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
Anthropic’s revenue in the third quarter hit $16.8 billion, the company on Wednesday told prospective investors in its initial public offering, according to people familiar with the matter. That marked a jump of about 45% from the second quarter, and was more than 3.6 times the company’s revenue ...
First reported Oct 15, 2026 00:28 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
To rein in AI spending, large companies are capping employees’ usage, turning to cheaper and smaller models and using routers to send only the hardest requests to the most expensive models.Cognition, the startup behind the AI coding agent Devin, is adding a new trick to the book: measuring how efficiently different engineers use AI so companies can allocate more resources toward their most efficient employees, Cognition told The Information exclusively.“The limits that a user should have should not be static. They should be dynamic based on the efficiency of your usage and the value that you're getting out of it,” said Calvin Giroud, a vice president of customer engineering at Cognition.By looking at an engineer’s coding session using Devin, Cognition can estimate the equivalent number of hours it would have taken a human to do the same amount of work. Dividing by the costs of that session, Cognition gets a measure of each engineer’s efficiency.
First reported Oct 15, 2026 14:01 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
Portland-based startup Mueon raised $65 million to develop a new way to arrange AI server rack components. The company says its design could fit up to ten times more computing capacity into the same amount of power as existing data center setups. This approach could ease constraints on global ...
First reported Oct 15, 2026 10:30 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
Anthropic has now begun embedding AI evaluators within the company to assess and publish reports on safety practices and risks, Anthropic said in a blog post on Thursday. They’ll use company computers, office space and have access to internal tools and systems. The details follow Anthropic CEO ...
First reported Oct 15, 2026 19:37 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
This was not the day to be a publicly traded neocloud (as young AI data center firms are known). As the market sold off on bad inflation data—reinforcing certainty of another interest rate hike—neoclouds tanked. These companies typically are borrowing a lot to finance expansion. The worst hit in the stock sell-off was CoreWeave, whose stock fell 15.5%, fueled by chatter that its bonds were falling to worryingly low levels. CoreWeave CEO and co-founder Michael Intrator was defiant. He told his staff, according to a spokesperson: “When you are building a new type of technology company, there will be periods of time when the market misunderstands and acts irrationally.” Yeah, right. The issue may be more that Intrator doesn’t understand investors. He sold CoreWeave stock every week between April and the end of September, securities filings show, while his fellow co-founders have also been selling regularly. That can’t help but undermine investor confidence in the company. Intrator could win some brownie points by pledging to stop selling his stock for a while.
First reported Oct 15, 2026 00:01 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
China is considering new export controls on AI technologies that could potentially restrict the overseas transfers of AI models and chip designs deemed strategically important. The Ministry of Commerce on Friday issued a draft plan to add 40 technologies across AI, biomedicine and photovoltaic ...
First reported Oct 16, 2026 11:51 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
CoreWeave and Broadcom have objected to a request from OKXICE, a joint venture between crypto exchange OKX and Intercontinental Exchange, to list and trade their stocks on blockchain, joining a growing list of companies pushing back against crypto versions of their stocks. The objections could ...
First reported Oct 15, 2026 20:20 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
As OpenAI has jockeyed with Anthropic to win over developers with new models and tools this year, its advertising business at times has seemed like an afterthought. Not anymore. Over the last few months, the company has unleashed a flurry of new products and tools to court advertisers, even as it has cut ad rates. That’s helped lure a lot more advertisers, new data show. The company has also gone on a hiring spree. Nearly half of the roughly 140 OpenAI employees working on ads joined between July and September, according to Crustdata, which tracks employees’ public profiles. Meta Platforms, where ad chief Dave Dugan spent 12 years, is the biggest source of talent.
First reported Oct 15, 2026 18:30 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
Taiwan Semiconductor Manufacturing Co. said Thursday it will build another 3-nanometer chip factory in the Taiwanese city of Tainan, with production set for the first half of 2028. The move signals confidence that strong AI chip demand will last for years. CEO C.C. Wei said strong customer ...
First reported Oct 15, 2026 08:36 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
Tesla showed off its new Roadster on Thursday night in a series of elaborate demonstrations. Tesla first announced plans for a next generation Roadster in 2017 and unveiled a vehicle at the time, but the car was never produced. On Thursday, Tesla debuted an entirely new version of the vehicle. ...
First reported Oct 16, 2026 02:06 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
Chinese AI agents took exposed credentials from a company’s source code and bypassed safeguards in an attempt to find information on mapping service Amap, according to a report on Wednesday from a group of researchers known as “swarmchasers.” Although the agents self-identified as instances of ...
First reported Oct 15, 2026 05:00 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
As companies create more applications using AI, corporate officers say demand is rising for a new type of software that stress-tests those apps, simulating how they handle network problems and other disasters that humans may not think to test for—including cyberattacks by rogue AIs.Luis Chávez, CTO of coding assistant provider Replit, says his company uses an AI-assisted software known as a deterministic simulator, a kind of flight simulator for software. The deterministic part refers to how the simulator lets companies run the same disaster test again and again so they can try out different fixes for bugs that crop up during network failures or hacking attempts.Traditional stress-testing methods rely on developers guessing every potential problem that may arise. Merely using today’s AI models to evaluate code often produces false alarms or fake warnings, corporate executives say.
First reported Oct 15, 2026 18:22 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
Apple is preparing to release its Apple Intelligence on-device AI service in mainland China in December, ending a lengthy wait caused by regulatory hurdles, Bloomberg reported Thursday. The planned release of Apple Intelligence in China, one of the iPhone-maker’s most important markets, comes ...
First reported Oct 15, 2026 05:11 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
I am thrilled to announce three major editorial promotions for Nick, Abe and Meredith, along with some changes that recognize the incredible work of our newsroom and set the stage for more growth in what is shaping up to be the most exciting time in our history. Nick Wingfield has been promoted to Executive Editor, responsible for ensuring the high bar of all our reporting. Since he joined The Information eight years ago after working at the New York Times and Wall Street Journal, Nick has pushed us to think bigger in our journalism, overseeing our features efforts and some of our most important beats. When we heard whispers that Jony Ive’s personal life was becoming a distraction from his work at Apple, he and Aaron Tilley mustered a slew of reporting that turned into one of our most memorable crash leders. That’s what he has done again and again. Working with talented reporters to drive maximum impact, across coasts, beats and more. In his new role, Nick will run the day-to-day publication with me and Amir, with us all dividing up responsibilities for what we chase and ensuring the highest bar in what we publish while continuing to grow the team and build up new editorial areas. He will continue to manage his team of reporters. Abe Brown has been promoted to Features Editor, with responsibility for all our features at The Information. As Weekend editor, Abe has proven himself as something rare in media these days: a careful and skilled editor with a zest for trying new things. While managing a section, he has also jumped in any day of the week to help edit our biggest stories with a tireless work ethic and great attitude. I am excited for more reporters to work with Abe and for him to push us in new directions. I am thrilled to promote Meredith Mazzilli to Finance Editor. From the day she joined The Information, it has been clear that Meredith knows finance. While she has led all sorts of consequential coverage on ads, commerce, Musk and beyond, in recent months, she has helped our finance team carve out a huge lane around the financing of data centers and this turbulent moment. I’m excited to see how far she and the team can run against that massively important story. Meredith has also begun the work of bringing new talent to the team. I am thrilled to have her officially step into the role leading Finance, continuing to expand our reporting staff and find even more lanes where we can dominate. I am also happy to share that Martin has decided he wants to shift his focus to the Briefing and future related Briefing franchises and will become Editor-at-Large. Over twelve years, Martin has had a hand in every aspect of this business. I am thrilled he will be working with us full-time to focus on writing and how to expand the Briefing franchise, while continuing to coach and advise the newsroom. And there will be more time to celebrate more than a decade of Martin as co-Executive Editor. He will continue to edit The Electric and, in the coming weeks, reporters who report to him will transition to other senior leaders to free him up to go full throttle in his new role. We are making these changes now to celebrate the success of our incredible editorial leadership team, which remains unrivaled in the industry, and to prepare for the future. The next few years are going to demand a lot of news organizations. Sweeping changes to how audiences consume news are just beginning and I honestly think most news organizations will have no idea what hit them. Meanwhile, the onslaught of “information,” much of it biased and fake, has only begun. Our secret sauce—the high impact, ahead-of-the-curve, focused work no one else is doing—is exactly the right formula for this moment.
First reported Oct 15, 2026 21:33 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
DayOne Data Centers, a Singapore-based data center operator gearing up for a multibillion-dollar initial public offering in New York, is little known to most U.S. investors. But its business is built on a much better known company: ByteDance. The TikTok parent company accounts for nearly 70% of DayOne’s revenue, according to two people with knowledge of DayOne’s operations. DayOne, which started as a Chinese data center company’s overseas business unit four years ago, has benefitted greatly from ByteDance’s rapid global expansion through TikTok. But that has also left it extraordinarily dependent on a single customer, which the company has acknowledged creates a significant risk for its business.
First reported Oct 16, 2026 16:00 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
It’s beginning to look like Anthropic waited too late to go public. Third-quarter revenue numbers disclosed to investors on Wednesday implied that its growth has slowed from the second quarter, which we reported is likely to put a ceiling on its IPO valuation. Anthropic might have been better off going public in June, when its growth was still spectacular. (Of course, a June IPO might have been impractical given that that’s when SpaceX went public.)As things stand now, Anthropic’s slowing growth may remind investors of a longstanding question surrounding the company: How much of a moat does it really have? Yes, its AI models are as good as they get, but increasingly, businesses don’t need really expensive frontier models. As we wrote earlier this week, developers are increasingly opting for other models that are good enough for most tasks. Anthropic’s aggressive pricing has prompted companies such as Microsoft to cut its spending on the former’s models, we reported 10 days ago. (This trend seems to be spreading).
First reported Oct 16, 2026 00:01 UTCCatalog metadata updated Oct 16, 2026 22:23 UTCOpen evidence record
The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.