SHA256 f139b4ca15feffb7a6633ec1a431c5c604b397576b56b5c863ae8fe4fa14db4f
File hash published by the cited source.
First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordPublished file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
File hash published by the cited source.
First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordFile hash published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIntroduction The landscape of software supply chain security has undergone a significant shift. Recent campaigns demonstrate that sophisticated threat actors are systematically targeting the engineering lifecycle by compromising trusted security and programming tools. These intrusions reveal three key tactics: Attackers target trusted security scanners, utility libraries, and AI developer tools to
First reported Sep 24, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordFile hash published by the cited source.
First reported Sep 25, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordWritten by: Robin Grunewald, Supriya Mazumdar, Kelli Vanderlee Introduction Google Threat Intelligence Group (GTIG) examines vulnerability disclosure and exploitation statistics to evaluate the impact of artificial intelligence (AI) on the vulnerability threat landscape. We found that AI is measurably changing not just the pace of vulnerability discovery and exploitation, but also the types and ty
First reported Sep 30, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordExecutive Summary Since the release of our May 2026 report detailing adversarial misuse of artificial intelligence (AI), Google Threat Intelligence Group (GTIG) has observed forward leaning adversaries transition from basic prompting to agentic AI workflows and AI-enabled automation. In these operations, human-in-the-loop latency is dramatically reduced, compressing the traditional window for defe
First reported Sep 08, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Sep 25, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Sep 25, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIntroduction In late September 2026, Mandiant Consulting and Google Threat Intelligence Group (GTIG) identified active, in-the-wild exploitation of a zero-day vulnerability (CVE-2026-88772) affecting Citrix NetScaler ADC and NetScaler Gateway appliances. We have observed evidence that organizations in North America and Europe in the government, financial services, technology, education, and legal
First reported Sep 29, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordIndicator published by the cited source.
First reported Sep 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordFile hash published by the cited source.
First reported Aug 20, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.