AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations, indicators, and research history in one bounded catalog.

2,400+Reachable catalog records
24 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

4 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.

Review source update dates and status
  • intelligence_src_27926f57314ac55af2Recent successful batchLast successful batch: Last attempt:
  • intelligence_src_294c5c73332026c4ecRecent successful batchLast successful batch: Last attempt:
  • intelligence_src_295885ae8782cf8168Recent successful batchLast successful batch: Last attempt:
  • intelligence_src_2c0c9d492fa2c22d5bRecent successful batchLast successful batch: Last attempt:

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.

Clear filters
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
REPORT1 SOURCE

MISP Warning Lists version 2024110800 released

Release Notes for MISP-WarningLists November 2024 Update New Additions and Changes: Zscaler Source Update: Added the missing script for Zscaler source generation, enhancing the capability to maintain updated and comprehensive warning lists. [Commit: 192534d] Apple IP Ranges Update: Updated the Apple IP ranges based on the latest ARIN allocation, ensuring the lists reflect the current state of Apple’s network allocations. Contributed by Xiufeng Guo. [Commits: 94fdbfd, 934175c] Living Off Trusted Sites (LOTS) Project: Integrated domains from the “Living Off Trusted Sites” project, expanding the warning lists to cover domains that could potentially be leveraged for trusted-based attacks. Initial work contributed by Goodlandsecurity. [Commits: 3f38437, ae6ad98, fc55112] General Updates: Multiple updates and improvements to various warning lists were made to ensure the data remains relevant and effective. [Commits: 018f958, bfbb9a8] Blogpost Link Update: Adjustments made to blogpost links to maintain up-to-date references for associated resources. [Commit: dfef76d] Contributors: Alexandre Dulaunoy Xiufeng Guo Goodlandsecurity Karen Yousefi Thanat0s These updates reflect ongoing efforts to maintain and enhance the MISP warning lists, providing better threat intelligence and context for users. Notes about the release Starting with this release, misp-warning-lists will be tagged using the %Y%m%d00 format for each new version. This change enables users to easily verify whether they are using the latest release. The versioning is now independent of the MISP core software, as the project is also utilized as a standalone tool in various other applications.

First reported Nov 11, 2024 08:05 UTCCatalog metadata updated Oct 13, 2026 20:04 UTCOpen evidence record
REPORT1 SOURCE

MEV for Hire - The Rise of Dark Pool Validators

What began as opportunistic bots has become a full-blown MEV cartel — private auctions, hidden relays, and validator collusion now rule blockspace, turning decentralization into a pay-to-play game you never signed up for.

First reported Apr 21, 2025 00:00 UTCCatalog metadata updated Oct 13, 2026 19:53 UTCOpen evidence record
REPORT1 SOURCE

DeFi’s UX Problem Is a Feature, Not a Bug

DeFi’s chaotic interfaces aren’t a bug — they’re a feature. Confusion keeps users compliant, disoriented, and easier to exploit in a space where clarity threatens profit and understanding kills the hype.

First reported Apr 14, 2025 00:00 UTCCatalog metadata updated Oct 13, 2026 19:53 UTCOpen evidence record
REPORT1 SOURCE

Transparent When You Want It, Private When You Need It

Public blockchains solved settlement. They didn't solve privacy. Institutions need to protect positions, counterparty relationships, and transaction amounts without abandoning transparency entirely - and every architecture that tried to solve this hit the same wall. Protocol-level privacy locks everything. Permissioned chains recreate centralization. Separate privacy layers fragment liquidity. Stellar's answer is different. Cryptographic primitives baked into the base layer, two production-ready privacy models on top, and the institution decides what to reveal and to whom. Transparent when you want it. Private when you need it.

First reported Apr 09, 2026 00:00 UTCCatalog metadata updated Oct 13, 2026 19:53 UTCOpen evidence record
REPORT1 SOURCE

Social Recovery Wallets are Broken by Design

Social recovery sounds like a friendly safety net — until it isn't. In reality, it hands your security over to the very humans crypto was built to eliminate from the trust model. A UX-driven mirage of safety masks the vulnerabilities of guardianship, turning recovery into the ultimate attack vector.

First reported Jun 09, 2025 00:00 UTCCatalog metadata updated Oct 13, 2026 19:53 UTCOpen evidence record
REPORT1 SOURCE

Why Privacy Matters More Than Ever in 2026

Privacy is no longer a cypherpunk slogan - it’s turning into core blockchain infrastructure. Public blockchains proved they can move money quickly, but they also expose balances, relationships, and behavior permanently. The next wave of networks isn’t competing on speed or fees, but on who can protect financial data without hiding everything.

First reported Feb 23, 2026 00:00 UTCCatalog metadata updated Oct 13, 2026 19:53 UTCOpen evidence record
REPORT1 SOURCE

Introducing AIMap: Security Testing For AI Agent Infrastructure

Attackers can already find, connect to, and probe your exposed AI agent infrastructure. AIMap gives defenders that same visibility. Built by Bishop Fox, this open-source tool discovers, scores, and tests exposed AI endpoints so you can understand your real attack surface before someone else does.

First reported Apr 30, 2026 12:00 UTCCatalog metadata updated Oct 13, 2026 19:46 UTCOpen evidence record
REPORT1 SOURCE

Critical SQL Injection in Metabase via Password Reset: CVE-2026-72898

Immediate action is advised for all organizations running self-hosted Metabase. A critical, unauthenticated SQL injection vulnerability has been disclosed in Metabase's password reset functionality, and Metabase has confirmed active exploitation in the wild.

First reported Aug 11, 2026 07:00 UTCCatalog metadata updated Oct 13, 2026 19:46 UTCOpen evidence record
REPORT1 SOURCE

Taking Maestro in Stride: AI Threat Modeling Frameworks

AI agents don’t fit traditional threat models. They act like users, services, and data pipelines at once. Learn why STRIDE alone falls short, how MAESTRO fills the gaps, and why modern AI systems must be treated as insider threats.

First reported Apr 16, 2026 13:00 UTCCatalog metadata updated Oct 13, 2026 19:46 UTCOpen evidence record
REPORT1 SOURCE

Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557

A CVSS 10.0 path traversal in UniFi Network Application lets unauthenticated attackers read controller backups, extract credentials, and take over every managed device on the network. Bishop Fox breaks down the attack paths, the preconditions, and a safe detection tool to check your exposure.

First reported May 29, 2026 13:00 UTCCatalog metadata updated Oct 13, 2026 19:46 UTCOpen evidence record
REPORT1 SOURCE

A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit

ManageEngine's SSO ticket was just the millisecond wall-clock time at login, making unauthenticated account takeover theoretically possible. Bishop Fox confirmed the exploit end to end and breaks down why blind exploitation is still impractical and what defenders should do about it.

First reported Jul 21, 2026 15:00 UTCCatalog metadata updated Oct 13, 2026 19:46 UTCOpen evidence record
REPORT1 SOURCE

CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key

A misconfigured cluster join key in JFrog Artifactory's default install lets unauthenticated attackers mint a permanent admin token in one request. Bishop Fox reproduced the full chain, confirmed in-the-wild exploitation, and shares a non-invasive detection check and remediation guidance.

First reported Sep 11, 2026 13:00 UTCCatalog metadata updated Oct 13, 2026 19:46 UTCOpen evidence record
REPORT1 SOURCE

AI Finds Vulnerabilities. Security Experts Find Impact.

AI got a security consultant 80% of the way through a real web application assessment. The other 20% was where the actual security work happened. This walkthrough shows where AI delivered, where it produced confident but impossible explanations, and why human judgment still drives real findings.

First reported Jun 24, 2026 13:00 UTCCatalog metadata updated Oct 13, 2026 19:46 UTCOpen evidence record
REPORT1 SOURCE

One Port to Root: Weaponizing Check Point Management CVE-2026-93616

An unauthenticated attacker who can reach TCP 19009 on a Check Point management server can take it over completely. Bishop Fox reproduced the full root RCE chain on R81.10 and R82.10, breaks down all three vulnerabilities the patch actually closes, and shares a safe detection tool for defenders.

First reported Oct 01, 2026 13:00 UTCCatalog metadata updated Oct 13, 2026 19:46 UTCOpen evidence record

The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.

A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.