Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
12 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
intelligence_src_49e3d32de063bf0c23Recent successful batchLast successful batch: Last attempt:
intelligence_src_4a349ec95eeb880450Recent successful batchLast successful batch: Last attempt:
intelligence_src_4a5b00a121493cd09cRecent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
MozFest House Zambia took place on November 20-21, 2024 at the Lusaka International Conference Center. Over 500 technologists, activists, funders, and creators gathered to explore the transformative potential of collective action towards ethical, open, and equitable AI that serves communities across Africa.MozFest House Zambia was a testament that joy, imagination, and solidarity are a critical part of the equation of how we get there. In today’s interconnected and complex systems, the process of creating solutions is as important as the solutions themselves. MozFest House Zambia exemplified this, showcasing how impactful work and discussions about AI are thriving in community-led spaces rather than confined to exclusive boardrooms.Angela Odour Lungati’s keynote resonated deeply, a reminder that technology is a tool—not the solution itself. “Technology alone will not change the world,” she emphasized. “How it is used is what is going to change the world.” MozFest House Zambia reinforced the idea that the power to create meaningful change lies with diverse, cross-industry, engaged communities working collaboratively toward shared goals.Mainstage Highlights:Angela Odour Lungati, Executive Director of Ushahidi, delivered a compelling keynote on empowering communities through data, tracing the transformative journey of Ushahidi. Her fireside chat with Koliwe Majama expanded on this vision for data equity in Africa. Key word to remember: collective intelligence lies in us first, not in the machines we create.Dialogues & Debates: Working Open to Advance Transparent & Trustworthy AI explored how open-source approaches can empower local communities to shape AI technologies that reflect diverse needs.Dialogues & Debates: Harnessing South-South Solidarity: explored how the solidarity of efforts across the Global South is most urgent to challenge the current technology ecosystem.The Data Futures Showcase spotlighted innovative projects revolutionizing data ownership, offering insights into protecting cultural heritage and fostering self-determination.On the main stage, a series of compelling lightning talks wove together themes like climate justice and philanthropy, highlighting the critical role of cross-sector collaboration in shaping sustainable solutions for the future.Community Sessions and WorkshopsMozFest House Zambia brought workshops and sessions that exemplified the festival’s commitment to co-creating and building an equitable, just, and sustainable digital world. Across two days, participants engaged with community-led sessions around urgent and local issues:Responsible AI for AgricultureDuring this session, participants explored the role of AI in transforming African agriculture and unpacked strategies for equitable tech adoption.African Intelligence for Artificial IntelligenceThis workshop delved into community-driven approaches to developing AI models that support African languages and art. It highlighted how collaboration and creativity can ensure trustworthy, inclusive AI.Protecting Human Rights DefendersCo-hosted by Meta, this session shared regional strategies to safeguard activists and journalists in high-risk environments. It emphasized collaboration in creating robust protections against surveillance and digital threats.Tech and Gender Justice in ElectionsFocused on combating gendered disinformation in African political campaigns, this session spotlighted the systemic challenges women face online. It also offered tools and strategies to create safer, more equitable digital spaces for political participation.Art, Interactive Booths, and Collective CareAttendees enjoyed art installations, film screenings and different interactive booths by Common Voice, Firefox, The Engine Room, and CNN. The art installations and experiences were all active moments where attendees were encouraged to participate.KeyZazi Art InstallationParticipants during the two days experienced this digital collage which c
First reported Nov 27, 2024 15:25 UTCCatalog metadata updated Oct 13, 2026 09:47 UTCOpen evidence record
True to our roots in open-source, we intend to go about the Foundation’s work transparently, learning and iterating out in the open. “Open” isn’t just for products – it’s a set of principles we want to bring to everything we do, whether it’s advocacy or grantmaking or community-building. (Spoiler: We’ve done this before!) This series of “Build in the Open” posts is the beginning of our re-engaging the many experts, thinkers, and advocates who care about Mozilla’s work as much as we do. Core principles shouldn’t change, but circumstances certainly do. It’s a dramatic understatement to say we live in a time of changing circumstances, with elections worldwide changing our advocacy landscape, technology itself unfurling at a dizzying pace, and the Foundation’s own reorganization. Throughout previous eras of change, one constant for Mozilla has been vociferous and bold advocacy for technology that works for people – not the other way around. That isn’t changing. Advocacy is, and will continue to be, a vital part of how the Foundation engages with the world. But we will take the opportunity to understand how we, in this new era, best work with people – yes, that’s you – to make our advocacy work maximally effective. As our colleague Ziyaad Bhorat says, we believe in town squares, not closed doors. We’d like to embrace this moment of macro- and micro- change as an opportunity to think about how we meld open advocacy with public participatory design. That’s where this post comes in.The Future We WantMozilla has always been known for fighting against harmful tech practices and defending the open Internet. At our very best, we critique and resist undesirable futures and also actively build the positive future we want to see. Critiques can open up white space of what new innovations should be built, or how existing applications of technology must evolve or cease. And so this dual approach – combining critical analysis with constructive vision – frames accountability work as essential groundwork for positive change. For example, our work to shine light on the privacy-invasive practices of modern cars, support data access for research, expose the difficulty platforms have in safeguarding elections, understand the data ecosystem supporting LLMs, and help understand and then define “open source” AI have all shaped those respective fields. That makes our advocacy work all the more critical. That’s where you come in. Essential QuestionsWe’re asking ourselves tough, necessary questions, and while we have very strong opinions of our own – we’d love to know what you think, too. Where can we make the most difference? What are the issues that feel most urgent or underserved, particularly as the tech advocacy landscape globally shifts in the next five years? What best supports what the field needs – research, organizing, and/or communications? How can we most effectively bridge critique and creation? How can open advocacy directly inform and fuel the development of better alternatives - both in advocacy and products? Quite literally: what does “better” or “good” look like? What does it look like to effectively engage new relationships and continue to strengthen our existing communities and coalitions around core issues? What does "building in public" mean in the context of tech advocacy? As an organization committed to openness, how can we model advocacy as transparent, participatory, and collaborative while maintaining its effectiveness? Looking AheadFrankly these are questions we should always be asking ourselves, but now is a particularly good time to do so out in the open. And while we have our early answers, we know our long-standing community, partners, and fellow travelers will have equally robust views too – and those matter deeply to us. We
First reported Nov 15, 2024 17:44 UTCCatalog metadata updated Oct 13, 2026 09:47 UTCOpen evidence record
Study of booming market shows how sharing and exploitation of health and biometric data fuels everything from insurance hikes to workplace discrimination (BUDAPEST, HUNGARY, NOVEMBER 20) — Health-related cybersecurity breaches and ransom attacks have skyrocketed more than 4000% – from 18 incidents in 2009 to 745 in 2023 in the United States only, targeting a booming market of body-centric data expected to exceed $500 billion by 2030, according to new research from Mozilla Fellow, Júlia Keserű.Keserű’s research, "Skin to Screen: Bodily Integrity in the Digital Age”is part of her senior Fellowship project at Mozilla; the fellowship brings together experts working to advance openness and accountability in AI and promote an ethical, responsible, and inclusive digital environment.The research examines the collection of what Keserű calls “body-centric data” which has experienced a dramatic surge since the COVID-19 pandemic and with the rise of sophisticated AI tools. Body centric data includes information about people’s biological and psychological characteristics — from fingerprints used to unlock phones and face scans for security to intimate data from fitness and fertility trackers, mental health apps, and digital medical records. However, this expansion also fuels significant risks: breaches in health data, widespread surveillance, discrimination, and exploitation by AI-driven systems have exposed major gaps in existing legal protections.The research also features a survey conducted by Keserű, which confirmed widespread public anxiety about body-centric data sharing, with most respondents feeling "betrayed" and "exploited" by unauthorized data sharing. While users value health-related benefits and are willing to donate their data for scientific research, they expressed significant anger and fear about their data being used for profit without their consent, especially in sensitive contexts like mental or reproductive health." Most participants demanded stronger controls and protections, and a lot more transparency in how their data is handled by companies. READ RESEARCH In spite of concerns, the study finds that the market for body-centric data has surged drastically, with the biometric industry alone projected to reach $200 billion by 2032. For context, the global pharmaceutical industry was valued at approximately $1.5 trillion in 2022. Keserű’s research warns that as companies collect more sensitive data about our bodies and minds, current laws offer little protection against the growing harms.Some key findings and reported harms include:Cybersecurity Threats and Privacy Violations: Growing security breaches and consent violations can have very serious implications, especially in contexts like reproductive or mental health. For instance, information about fertility and period cycles is often sold to third parties - which can lead to litigation if someone is suspected of having an abortion in a repressive context.Discrimination and Bias: Data-driven discrimination is also on the rise. AI-driven diagnostic tools are trained on able-bodied white populations, demonstrating lower accuracy for darker-skinned patients, compounding disparities in healthcare, and fueling distrust. AI-powered recruitment tools frequently discriminate against neurodivergent people by trying to measure traits like optimism or emotional stability.Your Emotions aren’t Private: Emotion recognition technologies, which assess and interpret human emotions through various biometric features, are becoming essential across multiple sectors, driven by the rapid expansion of body-centric data collection. These methods are becoming increasingly sophisticated, operating similarly to lie detectors, particularly with the growing use of multi-modal
First reported Nov 19, 2024 16:14 UTCCatalog metadata updated Oct 13, 2026 09:47 UTCOpen evidence record
At MozFest House Zambia, Skoll Foundation brought together technologists, policymakers, and activists who are implementing AI solutions on the continent to provide a ground-up perspective on the technology’s impact. The discussion illuminated the nuances of AI’s role in Africa.Practical ImplicationsThe conversation kicked off with examples of AI’s practical applications. Bright Simons from mPedigree explained how his organization uses AI tags to provide quality control for drugs as they move along the production process. He also talked about sensors that monitor the storage conditions of temperature-sensitive medicines, helping nurses to administer them safely. Ensuring the quality of drugs in Africa can be a challenge, and solutions like these provide an extra layer of protection to consumers.The Labor QuandaryAI's impact on labor is a global concern, and in Africa, the fault lines are even more visible with challenges such as extractive labor practices in AI development. Simons brought up a system mPedigree developed to fill out government forms. It made experts in this bureaucratic process concerned about their job security, and even though this solution rendered a cumbersome task easier, it also jeopardized employment for these administrators. Ashnah Kalemera from The Collaboration on International ICT Policy for East and Southern Africa (CIPESA) warned about AI’s potential for increasing surveillance and reducing the autonomy of workers. AI systems are already contributing to labor rights inequalities and increasing vulnerabilities, especially in sectors with limited union protections.Infrastructural ChallengesThe conversation repeatedly returned to the barriers posed by inadequate infrastructure. Debbie Rogers from Reach Digital Health highlighted the cost barriers to implementing large-scale AI models, particularly in healthcare. One way around it is to look for context-specific solutions, and Rogers’s work includes developing smaller, fit-for-purpose machine learning models that could provide a way to balance affordability and efficiency.The Need For Better GovernanceA significant piece in the AI development ecosystem is governance or the lack thereof. Simons cautioned against the misuse of AI in politically charged contexts like government-funded insurance against extreme weather where payouts might be manipulated for electoral gains. For him, governance is key to ensuring fairness and preventing power imbalances.Participants brought up governments’ abstract ways of including AI in national development plans, instead of providing applicable frameworks for AI governance. However, as Angela Oduor Lungati of Ushahidi pointed out, organizations can’t avoid working with governments if they want to implement lasting solutions. In line with Angela’s remarks, an audience member pointed out that AI can help create practical solutions which people can take to their government officials, rather than bringing up problems and expecting the government to find solutions.The Future of AI in AfricaAI holds immense promise for Africa, from safer supply chains to improving healthcare and agriculture. However, its success depends on building trust, strengthening governance, and fostering collaboration across sectors. The conversations at MozFest House Zambia underscored a critical truth: Africa’s AI story will be defined by the people implementing it today, and they will have to navigate AI’s promises and pitfalls.
First reported Nov 25, 2024 14:08 UTCCatalog metadata updated Oct 13, 2026 09:47 UTCOpen evidence record
In order to better support a globally distributed community of dataset users, developers, language activists and voice contributors the Common Voice team is launching a Discord server.You can join the Discord community now by clicking here.Why Discord?The team wanted to balance using a communications tool that was already in widespread use with what technologies are being used and supported by other Mozilla teams. By using Discord we hope to allow community members from Mozfest, MDN, MozAI and other technology andor language communities to join us with less friction.We also wanted to pick a communications channel that allowed us more easily to run events online for community members around the world who might not have the time to join in-person events with Common Voice. Discord’s voice channels and events features seemed like a great fit for running online events for a community built around a crowdsourced voice dataset.What if I can’t access Discord?Selecting communications tools for a global community with different levels of access to these tools is always a challenge. To better support community members where Discord isn’t available, we will set up a bridge between the Common Voice Matrix channel and the new Common Voice Discord in the coming weeks.What about the other Common Voice run community channels?You can always email the Common Voice team directly at commonvoice@mozilla.org. If you want to chat to us about the Common Voice open source platform, you can also find us on Github. Also, you can still access the Common Voice Matrix room.What if I run a Common Voice community channel somewhere else?We love the diversity of community-run online groups and communities that people run for Common Voice. This Discord community is designed to add to the existing network of Common Voice community channels. If you would like your community managed group listed in the Common Voice documentation, so people can more easily find it, please email us at commonvoice@mozilla.org to tell us more about it!Join us for our first event on Discord:2024 recap and AMA with Common Voice teamJoin us for a review of what we did during 2024 and to learn more about plans for the new year. Plus, have a chance to ask questions to our team.Guests: EM Lewis-Jong (Product Director), Dimitrij Feller (Full-Stack Engineer), Miguel Morachimo (Program Officer)Host: Jessica Rose (Technology Community Specialist)Date: January 7, 2025, 2 pm (UTC)Where: On the Mozilla Common Voice Discord server.Feedback or ideas?We always want to know more about what you think of our community direction, the Common Voice datasets or anything else related to our work that’s on your mind. Chat to us on our brand new Discord, on Matrix, or email us at commonvoice@mozilla.org
First reported Dec 04, 2024 14:41 UTCCatalog metadata updated Oct 13, 2026 09:47 UTCOpen evidence record
Researchers from The DFIR Report, in partnership with Proofpoint, have identified a new and resilient variant of the Interlock ransomware group’s remote access trojan (RAT). This new malware, a shift from the previously identified JavaScript-based Interlock RAT (aka NodeSnake), uses PHP and is being used in a widespread campaign. Since May 2025, activity related to […] The post KongTuke FileFix Leads to New Interlock RAT Variant appeared first on The DFIR Report.
First reported Jul 14, 2025 00:50 UTCCatalog metadata updated Oct 13, 2026 09:45 UTCOpen evidence record
Key Takeaways An audio version of this report can be found on Spotify, Apple, YouTube, Audible, & Amazon.  This intrusion began in mid-February 2024 after a threat actor exploited a vulnerability (CVE-2023-46604) on an exposed Apache ActiveMQ server. The threat actor was able to perform remote code execution (RCE) by using a Java Spring class and a custom Java Spring […] The post Apache ActiveMQ Exploit Leads to LockBit Ransomware appeared first on The DFIR Report.
First reported Feb 23, 2026 14:09 UTCCatalog metadata updated Oct 13, 2026 09:45 UTCOpen evidence record
Key Takeaways This case was first reported to customers in a threat brief released in July 2025 and in a public flash alert in August 2025 in partnership with Swisscom B2B CSIRT, which observed another intrusion tied to the same campaign. This report contains data from both intrusions. We plan to release a DFIR Labs […] The post From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira appeared first on The DFIR Report.
First reported Jun 29, 2026 13:07 UTCCatalog metadata updated Oct 13, 2026 09:45 UTCOpen evidence record
The EtherRAT malware family was first reported by Sysdig back in December 2025. At that time, the initial access vector was exploitation of CVE-2025-55182 (React2Shell) targeting Linux servers. In March 2026, a Windows variant campaign was reported by Atos, with their investigation showing evidence of activity going back to the previous December. In April, we […] The post Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware appeared first on The DFIR Report.
First reported May 11, 2026 14:05 UTCCatalog metadata updated Oct 13, 2026 09:45 UTCOpen evidence record
Key Takeaways Private Threat Briefs: 20+ private DFIR reports annually.   Contact us today for pricing or a demo!   Table of Contents: Case Summary Analysts Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Command and Control Exfiltration Impact Timeline Diamond Model Indicators Detections MITRE ATT&CK Case Summary The intrusion […] The post From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion appeared first on The DFIR Report.
First reported Sep 29, 2025 14:30 UTCCatalog metadata updated Oct 13, 2026 09:45 UTCOpen evidence record
Overview Bumblebee malware has been an initial access tool used by threat actors since late 2021. In 2023 the malware was first reported as using SEO poisoning as a delivery mechanism. Recently in May of 2025 Cyjax reported on a campaign using this method again, impersonating various IT tools. We observed a similar campaign in […] The post Flash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira appeared first on The DFIR Report.
First reported Aug 05, 2025 21:30 UTCCatalog metadata updated Oct 13, 2026 09:45 UTCOpen evidence record
Key Takeaways The DFIR Report Offerings Check out our Products here and our Services here. Want a demo, more information on our services, pricing or just want to chat? Get in Touch Contact us today for pricing or a demo! Case Summary In March 2026, our team identified an SEO poisoning campaign leading to malware deployment […] The post BengalSEO Part 1: Anatomy of the Operation appeared first on The DFIR Report.
First reported Aug 24, 2026 14:28 UTCCatalog metadata updated Oct 13, 2026 09:45 UTCOpen evidence record
Key Takeaways We identified an exposed server that provided unusual visibility into a large-scale, multi-victim exploitation and collection operation. Artifacts on the host showed that Claude Code and OpenClaw were embedded in the operator’s day-to-day workflow, supporting troubleshooting, orchestration, and refinement of the collection pipeline. This AI-assisted workflow resulted in the modular platform Bissa scanner […] The post Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting appeared first on The DFIR Report.
First reported Apr 22, 2026 14:51 UTCCatalog metadata updated Oct 13, 2026 09:45 UTCOpen evidence record
Key Takeaways The DFIR Report Services Contact us today for pricing or a demo! The intrusion began in early March 2025 with a single successful Remote Desktop Protocol (RDP) logon to an internet-exposed system. Notably, there was no evidence of credential stuffing, brute forcing, or other failed authentication attempts from the source IP, indicating the […] The post Cat’s Got Your Files: Lynx Ransomware appeared first on The DFIR Report.
First reported Dec 17, 2025 19:07 UTCCatalog metadata updated Oct 13, 2026 09:45 UTCOpen evidence record
Key Takeaways Private Threat Briefs: 20+ private DFIR reports annually. Contact us today for pricing or a demo! Table of Contents: Case Summary Analysts Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command and Control Exfiltration Impact Timeline Diamond Model Indicators Detections MITRE ATT&CK Case Summary The intrusion began in […] The post Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs appeared first on The DFIR Report.
First reported Sep 08, 2025 14:20 UTCCatalog metadata updated Oct 13, 2026 09:45 UTCOpen evidence record
US Disrupts Chinese State-Sponsored Hacking Tools The United States has disrupted MicroScan and FishHub, two hacking tools built by Beijing-based Integrity Technology Group and used by Flax Typhoon and other Chinese state-sponsored groups against US and foreign critical infrastructure. Authorities seized the domains used to access the tools, which supported vulnerability scanning through a Mirai-based […] The post InfoSec News Nuggets – 10/09/2026 appeared first on AboutDFIR - The Definitive Compendium Project.
First reported Oct 09, 2026 13:46 UTCCatalog metadata updated Oct 13, 2026 09:41 UTCOpen evidence record
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes CISA has added a critical Fortinet FortiMail vulnerability, CVE-2026-104286 (CVSS 9.8), to its Known Exploited Vulnerabilities catalog after Fortinet confirmed in-the-wild attacks. The path traversal and NULL byte handling flaw lets an unauthenticated attacker write arbitrary files to the underlying system using crafted […] The post InfoSec News Nuggets – 10/02/2026 appeared first on AboutDFIR - The Definitive Compendium Project.
First reported Oct 02, 2026 14:19 UTCCatalog metadata updated Oct 13, 2026 09:41 UTCOpen evidence record
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation Dutch authorities have arrested Pepijn van der Stap, a convicted cybercriminal who used the online name “Umbreon,” on suspicion of helping the ShinyHunters group steal data and extort victims. Van der Stap went to prison over a 2023 extortion conviction and had recently described himself as […] The post InfoSec News Nuggets – 09/29/2026 appeared first on AboutDFIR - The Definitive Compendium Project.
First reported Sep 29, 2026 10:46 UTCCatalog metadata updated Oct 13, 2026 09:41 UTCOpen evidence record
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services Attackers have been exploiting a critical Citrix NetScaler ADC and Gateway flaw, CVE-2026-88772, since at least early September, weeks before Citrix disclosed it along with seven other CVEs on Sunday. Google Threat Intelligence Group and Mandiant say government, financial services, education, legal and […] The post InfoSec News Nuggets – 09/30/2026 appeared first on AboutDFIR - The Definitive Compendium Project.
First reported Sep 30, 2026 10:42 UTCCatalog metadata updated Oct 13, 2026 09:41 UTCOpen evidence record
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes Microsoft has shipped out-of-band security updates for CVE-2026-96940, a high-severity (CVSS 8.8) weak authorization flaw in Exchange Server that lets an authenticated attacker escalate privileges and access other users’ mailboxes within the same organization, reading their messages and attachments. The bug does not allow cross-tenant […] The post InfoSec News Nuggets – 10/06/2026 appeared first on AboutDFIR - The Definitive Compendium Project.
First reported Oct 06, 2026 10:46 UTCCatalog metadata updated Oct 13, 2026 09:41 UTCOpen evidence record
Hackers exploit Citrix NetScaler zero-day to deploy web shells Attackers have been exploiting the Citrix NetScaler zero-day CVE-2026-88772 since at least early September to gain root access, deploy custom web shells and tunneling malware, steal credentials, and move into internal networks at government, financial, education, legal, and professional services organizations across North America and Europe. […] The post InfoSec News Nuggets – 10/01/2026 appeared first on AboutDFIR - The Definitive Compendium Project.
First reported Oct 01, 2026 10:32 UTCCatalog metadata updated Oct 13, 2026 09:41 UTCOpen evidence record
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins The FBI is warning that the FortiBleed campaign against internet-exposed Fortinet FortiGate firewalls and SSL VPN gateways is still active, months after a massive credential leak was first discovered in June. Attackers break in using previously leaked logins, infostealer data, credential stuffing and password spraying, then […] The post InfoSec News Nuggets – 10/08/2026 appeared first on AboutDFIR - The Definitive Compendium Project.
First reported Oct 08, 2026 10:37 UTCCatalog metadata updated Oct 13, 2026 09:41 UTCOpen evidence record
Ransomware attack disrupts Japan’s IDCF Cloud used by govt clients IDC Frontier, the SoftBank-owned Japanese cloud and infrastructure provider, has confirmed that a ransomware attack beginning on October 7 knocked out its IDCF Cloud East Japan Region 1, disrupting service for 495 companies and local governments. The firm isolated the affected systems and disabled management […] The post InfoSec News Nuggets – 10/12/2026 appeared first on AboutDFIR - The Definitive Compendium Project.
First reported Oct 12, 2026 11:56 UTCCatalog metadata updated Oct 13, 2026 09:41 UTCOpen evidence record
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier Citrix NetScaler administrators spent the weekend scrambling after attackers began exploiting a new zero-day, CVE-2026-88779, a high-severity memory overflow affecting NetScaler ADC and Gateway appliances configured as a SAML SP or IdP. The attacks surfaced when fully patched systems started rebooting on Friday, only days […] The post InfoSec News Nuggets – 10/05/2026 appeared first on AboutDFIR - The Definitive Compendium Project.
First reported Oct 05, 2026 10:53 UTCCatalog metadata updated Oct 13, 2026 09:41 UTCOpen evidence record
The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.