Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
Immediate action is advised for all organizations running self-hosted Metabase. A critical, unauthenticated SQL injection vulnerability has been disclosed in Metabase's password reset functionality, and Metabase has confirmed active exploitation in the wild.
First reported Aug 11, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordWhen an agent reads attacker-controlled content and acts on it using its own privileges, the user's name ends up on every audit log entry. From Microsoft Copilot to ConfusedPilot, this post walks through how confused deputy attacks work and the layered controls that help contain them.
First reported May 08, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordTraefik's request read timeout is enabled by default and documented without exception, but it has never applied to HTTP/3. Bishop Fox confirmed the gap across four years of releases, measured it against the backend, and reported it to the vendor, who shipped a fix within twelve days.
First reported Aug 31, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordSolarWinds Web Help Desk treated SAML signature verification as optional and skipped every other validation the spec requires. Bishop Fox confirmed the full exploit end to end: one forged POST request, no credentials, full session takeover. Here is the root cause, the fix, and how to detect it.
First reported Sep 03, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordWhat if the MCP server itself is the attacker? Supply chain risk in MCP tools is structural, and the postmark-mcp and ClawHub compromises made it concrete. This post pairs those case studies with otto-support's selfpwn module to show exactly what a hostile MCP server can access the moment it runs.
First reported May 13, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordSSRF and token passthrough are not new, but MCP servers are reintroducing them at scale. From a chained SSRF-to-RCE in mcp-atlassian to Microsoft's MarkItDown and OpenClaw, this post walks through three recent disclosures and the controls that actually prevent them.
First reported May 07, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordMCP servers introduce a new attack surface, but the security fundamentals are familiar. In this final otto-support post, we use nmap, a Nuclei template, and MCP Inspector to discover, enumerate, and exploit an authorization gap without ever touching an LLM.
First reported Jun 03, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordCloudfoxable started as a hands-on AWS security training tool. Now it's expanding. Bishop Fox has launched the first set of Azure challenges, giving security professionals a safe, intentionally misconfigured environment to explore identity-driven attack paths and privilege escalation in Azure.
First reported May 04, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordWe walk through three eras of cyber attacks and makes a troubling case that LLMs are removing the one constraint that kept attackers slow and detectable.
First reported Jun 18, 2026 00:24 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordFavicons are small, static, and rarely changed, which makes them a surprisingly durable fingerprint for identifying software across the internet. Bishop Fox built an AI-assisted pipeline to hash and enrich them at scale, and this post shares the methodology, the dataset, and why it matters.
First reported Jul 02, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordThe following document describes identified vulnerabilities in the Shynet application version 0.13.1.
First reported Jun 18, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record.NET MAUI lets developers write once and ship to both platforms. From an attacker's perspective, that means reverse-engineer once and break everywhere. This post walks through extracting readable assemblies from MAUI apps and the high-impact vulnerability patterns that consistently appear.
First reported Sep 24, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordIf any of the MCP attack classes in this series happened in your environment today, would you detect it? Most MCP servers log only a tool name and a timestamp. This post walks through what that gap looks like in practice, how EchoLeak exploited it, and what proper audit logging actually requires.
First reported May 14, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordAttackers were exploiting MikroTik routers before fixes went public. Bishop Fox reproduced the full unauthenticated takeover chain, found persistence artifacts on real compromised devices, and breaks down what defenders need to investigate beyond patching to confirm they are actually clean.
First reported Sep 17, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordBishop Fox researchers confirmed a critical pre-authentication SQL injection in LiteLLM proxy affecting versions 1.81.16 through 1.83.6. Attackers can exploit it without credentials, and it blends into normal logs. In-the-wild exploitation was observed within 36 hours of the advisory going public.
First reported May 06, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordNIST just announced it's prioritizing CVE enrichment for government systems and deprioritizing everything else. For security teams that rely on NVD data, the gap is real. Here's what changed, why it's been coming for years, and what your team should do to stay ahead of the risk.
First reported Apr 22, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordA sanitization bypass in Strapi 4.0.0 through 5.36.1 lets unauthenticated attackers extract an admin's password reset token character by character and take over the account. With over 20,000 internet-facing hosts exposed, Bishop Fox breaks down how the exploit works and how to remediate it.
First reported May 22, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordServiceNow portals can expose backend records through public widgets and API endpoints even when the visible portal looks locked down. Bishop Fox built snowpick to test both surfaces systematically, and across 166 authorized assessments, nearly a third of instances returned data they shouldn't have.
First reported Jul 14, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordA three-part vulnerability chain in UniFi OS Server lets an unauthenticated attacker bypass the auth gateway, hit a command injection sink, and escalate to root in a single request. Bishop Fox confirmed the chain end to end and breaks down the attack, the impact, and how to detect it safely.
First reported Jun 05, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordCloud risk doesn’t live in a single permission, it lives in the relationships between them. Discover how Cirro maps hidden attack paths across Azure identities, resources, and data to reveal what attackers actually see.
First reported Apr 09, 2026 19:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordA trusted package turned into an attacker’s gateway overnight. The Axios supply chain breach shows how quickly risk can spread—and why security leaders must rethink trust in modern development.
First reported Apr 06, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordA single unauthenticated request bypasses authentication on NetScaler Gateway and AAA virtual servers. Whether that means a dead-end session, a proxy into the internal network, or root on the appliance depends entirely on configuration. Bishop Fox maps every branch and shares a safe detection tool.
First reported Sep 10, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordIntegrating AI into enterprise applications creates risk across every layer of the stack, not just the model. This post maps the full AI attack surface, shows how a prompt injection can chain into credential theft and cross-tenant data exposure, and explains why isolated scanners miss most of it.
First reported Oct 06, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordCVE-2026-0265 lets unauthenticated attackers forge a JWT and log in as any trusted user on CAS-enabled PAN-OS deployments. Bishop Fox built a detection tool that returns a definitive verdict from a single anonymous request, and breaks down exactly how the bug works and what to do about it.
First reported May 22, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.