AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations, indicators, and research history in one bounded catalog.

2,400+Reachable catalog records
36 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

4 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.

Review source update dates and status
  • intelligence_src_dec383e8ed98228cffRecent successful batchLast successful batch: Last attempt:
  • intelligence_src_def4c500eb0f19fd4eRecent successful batchLast successful batch: Last attempt:
  • intelligence_src_df3440d5202f514d9eRecent successful batchLast successful batch: Last attempt:
  • intelligence_src_df9b41f49a7ab5cdddRecent successful batchLast successful batch: Last attempt:

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.

Clear filters
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
REPORT1 SOURCE

South Africa to launch biometric asylum application platform in November

South Africa's Department of Home Affairs (DHA) says it intends to launch a biometric online application platform for asylum seekers by November 10. The move comes as the government continues its push to expand the use of biometrics to tackle identity fraud and improve its handling of migration-related issues. The information was disclosed by Home Affairs Minister Leon Schreiber, speaking during an Inter-Ministerial Committee on Migration media briefing in Pretoria on October 11. According to Schreiber, the envisaged system would allow DHA officials to verify applicants' identities, identify people who have previously submitted unsuccessful applications, authenticate passports and other travel documents, and check for other recorded immigration infringements. He said the principal objective was to speed up asylum application processing while reducing abuse of the system. The minister explained that the platform will require asylum applicants to submit biometric information, which DHA will use to verify their identities. The launch comes as Home Affairs faces an estimated backlog of 120,000 asylum appeals. Schreiber told the media that he did not have exact figures for the backlog, but he estimated that around 120,000 appeals were yet to be fully processed. He disclosed that initial applications were being processed in approximately 30 days, with the main delays occurring during appeals. In this regard, he said the department had brought in 74 advocates to step up its capacity to process pending appeals. Per the DHA, biometric checks are helping advance its ongoing digital transformation push, and giving meaning to the fight against identity fraud. The department this week welcomed the arrest of two former officials linked to a passport fraud syndicate uncovered in 2022. In a statement, the department noted that the syndicate exploited a manual-process loophole known as photo swapping, and used the identity details of legitimate citizens to obtain passports bearing photographs of foreign nationals. Officials underscored the importance of the ongoing reforms that now require biometric verification for passport applicants, including when photographs are captured. According to officials, this has helped close the loophole by making it more difficult to substitute another person's photograph during passport processing. In July, Home Affairs announced that it was looking for a service provider to build a system and supply biometric devices for a field campaign aimed at conducting identity verification as part of the government's push against illegal migration. The tender called for expertise in the development, support and maintenance of a biometric case management system for the department's Inspectorate Directorate, along with 600 handheld devices with built-in biometric readers. The asylum platform and the planned case management system reflect South Africa's sustained push to integrate biometrics into immigration administration and other public service delivery processes. Earlier this month, Schreiber presented an assessment of his 27 months in office, outlining the gains made in building South Africa's digital transformation infrastructure. On that occasion, he also demonstrated a prototype of the country's upcoming digital ID and unveiled plans to phase out the controversial green ID book.

First reported Oct 13, 2026 18:25 UTCCatalog metadata updated Oct 14, 2026 04:13 UTCOpen evidence record
REPORT1 SOURCE

Yoti adds ConnectID bank verification to its age assurance product in Australia

UK digital identity provider Yoti has integrated Australian-owned ConnectID’s digital identity exchange into its age assurance platform, giving users in Australia the option to use bank account verification for online age checks via Australia's bank-backed digital identity infrastructure. According to a release, Yoti users who choose the ConnectID option for verifying their age online will be securely redirected to their banking app, which already has their verified details, and can provide confirmation that an account holder meets the minimum age requirement for the service in question. Per the release, “no identity documents are uploaded or shared with platforms, and no personal data is shared – not even a name or date of birth – ensuring privacy and anonymity.” Age verification through ConnectID is already available for major platforms including Snapchat and Reddit, and is expanding its work with Epic Games through Kids Web Services (KWS). New Australian regulations cover 18+ rated games Having paved the way for social media age checks with its 2025 law, Australia is forging ahead with its online safety mission, implementing new regulations to help shape a safer internet. Yoti’s ConnectID integration is partly in response to new age assurance requirements taking effect under Australia’s Age-Restricted Material Codes, which affect games and apps given an R18+ rating. Yoti CEO Robin Tombs says that, “as age checks become increasingly common online, businesses need age assurance that is effective, secure and privacy-preserving. We’re giving companies a range of proven methods so they can strengthen age checks, respond to evolving regulations and give customers a choice in how they prove their age.” The statement reflects the establishment of two pillars for the age assurance industry: give users a choice in how to prove their age, and make sure all the options are privacy-preserving. Rick Iversen, Head of ConnectID, speaks to how the principle of data minimization underpins that second commitment. “ConnectID is designed around a simple principle: share only the minimum needed. If a platform needs to know that you’re over 16 or over 18, that’s the information it receives and nothing else – not your date of birth, not a copy of your identity document, and not your biometrics.”

First reported Oct 13, 2026 15:51 UTCCatalog metadata updated Oct 14, 2026 04:13 UTCOpen evidence record
REPORT1 SOURCE

MIMOS expands digital trust and AI security efforts under Malaysia’s sovereign AI agenda

Malaysia's MIMOS Berhad is developing technologies to strengthen digital trust as part of the country's sovereign AI agenda. The national applied research and development center is working on deepfake detection, blockchain-secured trusted logs, AI-driven cybersecurity solutions and trusted digital identity systems. “MIMOS is addressing deepfakes from both the defensive and research perspectives,” said MIMOS Group Chief Technology Officer Dr Zulaikha Kadim. According to MIMOS, theses are being developed through its Trusted Intelligence Platform, which is designed to support the testing and validation of technologies aligned with national priorities. The platform focuses on ensuring that data, AI systems and digital content can be verified and trusted in operational environments. The organization believes AI sovereignty should extend beyond ownership of computing infrastructure, Kadim said. Instead, it includes control over data, AI models, security requirements and critical technological capabilities needed to develop and deploy AI systems independently. Under the 13th Malaysia Plan (RMK13), MIMOS will advance several projects in digital trust and AI assurance. These include blockchain-secured trusted logs, deepfake detection technologies and AI-driven cybersecurity tools. The organization is also developing Mi-Muallim, a system designed to identify deviations in verified content and works with local languages. MIMOS is also working on cognitive AI and technologies related to computer vision and robotics. The research forms part of broader efforts to strengthen Malaysia's domestic capabilities in AI development and deployment. Malaysia’s Digital Ministry is strengthening its AI training programmes to address emerging risks such as deepfakes, voice cloning, fake videos and AI-enabled scams. Digital Minister Gobind Singh Deo said AI Malaysia Bhd is leading efforts through initiatives such as AI Safe, which assesses AI security risks and develops safeguards. Updated training modules contain guidance on AI-related threats and prevention measures for civil servants and the public, and are incorporated into programmes such as the Executive Digital Leadership Programme (EDLP) and public sector adoption of Gemini Workspace. Gobind also said AI Malaysia Bhd is coordinating with government, industry and academia to identify AI talent needs, evaluate existing training programmes and address skills gaps through new learning modules. The ministry is currently establishing a structure to support AI Malaysia Bhd's role in expanding AI talent development nationwide.

First reported Oct 13, 2026 18:43 UTCCatalog metadata updated Oct 14, 2026 04:13 UTCOpen evidence record
REPORT1 SOURCE

UK sets rules for live facial recognition in immigration enforcement

The UK has published updated guidance governing Immigration Enforcement's use of live facial recognition to locate people of immigration law enforcement interest, setting out rules for watchlists, deployment locations, human oversight and biometric matching thresholds. The Home Office policy covers operations beyond ports of entry, including transport hubs and joint deployments with police, while establishing safeguards intended to ensure that facial recognition is used lawfully and proportionately. The new guidelines instruct IE staff on “how to use overt LFR to locate relevant people lawfully and ethically” and “support IE’s and the Home Office’s legitimate immigration enforcement aims.  It provides a summary of the operational use of LFR and the governance and oversight applied. “IE staff must follow the agreed LFR policies and processes,” it says. “This helps IE use LFR lawfully and effectively, with appropriate safeguards, and helps maintain trust and confidence among the public, partners and other stakeholders.” Deployments must be contextual, proportional, time-limited To that end, the document lays out step-by-step protocols on “how the IE Live Facial Recognition (LFR) policy works from lawful purpose to accountable deployment,” in addition to a host of safety and governance considerations. Defining lawful purpose comes first. Then, it is determined who is eligible to be on an LFR watchlist. Watchlists are compiled with safeguards applied, requiring them to be linked to a defined deployment objective, location and context; time limited; and proportional, with a necessity and proportionality assessment completed. Use must be overt and subject to human decisions about engagement or enforcement. Images of people who do not generate an alert are “automatically and permanently deleted,” and deployments must be “monitored, reviewed and accountable.” Per the document, IE’s Emerging Technology Team (Strategic Services and Transformation) provides senior internal oversight for LFR. The policy states that “transparency is the default position for Immigration Enforcement’s use of LFR. Any departure from advance notice is exceptional, must be justified and recorded, and does not affect the requirement that deployments remain overt and subject to post-deployment publication and scrutiny.” The policy also makes clear that Immigration Enforcement's use of live facial recognition is not confined to ports of entry. Deployments may take place at transport hubs, along travel routes and at events, subject to assessments of necessity, proportionality and operational risk. Higher-risk deployments require additional oversight. The guidance also provides for cooperation with police forces, including joint deployments in which Immigration Enforcement can supply watchlists for police facial recognition systems or process police-supplied data through its own systems. The arrangements extend the potential operational reach of facial recognition in immigration enforcement while requiring deployments to remain subject to the policy's safeguards. Testing gets specific on false alert rate metrics The guidance is extensive, and includes key performance metrics on false alert rate (FAR) for the biometric technology powering live facial recognition: operational experience suggests that, in most scenarios, FAR should generally be 0.1 percent or lower, equivalent to fewer than one false alert per 1,000 comparisons. It also cites testing done in 2021 by South Wales Police (SWP) and the Metropolitan Police Service (MPS), to “test the accuracy and equitability of facial recognition tech in operational settings,” and specifically to a report on the NEC system used by the National Police Chiefs Council (NPCC) police forces. “After considering the report’s findings, engaging with UK police facial recognition leads, and deploying LFR with police support, IE will continue to use a threshold of 0.64 for IE-led

First reported Oct 13, 2026 19:02 UTCCatalog metadata updated Oct 14, 2026 04:13 UTCOpen evidence record
REPORT1 SOURCE

ICE contract reveals AI social media monitoring capabilities, raises surveillance questions

U.S. Immigration and Customs Enforcement (ICE) has disclosed detailed requirements for an AI-powered social media monitoring system that can analyze online conversations, detect unusual activity, and recognize images and video content across millions of online sources. The capabilities are described in a five-page sole-source justification ICE published last week, eight days after awarding a new three-year social media management contract to Carahsoft Technology Corporation for its Hootsuite Enterprise and Talkwalker platform. The September 30 award, potentially worth just shy of $1 million through September 2029, provides a more detailed picture of the social listening and analytical technology ICE is acquiring than earlier disclosures about its relationship with Hootsuite. In a written statement to Biometric Update, Carahsoft said the award renews an existing agreement with ICE’s Office of Public Affairs and characterized Hootsuite and Talkwalker as tools intended exclusively for communications management and public sentiment analysis. The statement said the platform cannot be used for facial recognition and that investigative tracking, tactical operations, or individual surveillance would violate their terms of use. Although ICE describes the acquisition primarily as support for official public communications, the justification identifies AI-driven monitoring of online behavior, automated processing of incoming messages, and recognition of visual content that would escape conventional text-based searches. The document also confirms that ICE has already accumulated approximately two years of historical social media conversation data, customized searches, analytical dashboards, and workflows within the Hootsuite environment. AI analyzes conversations, visual content, and emerging trends Among the capabilities ICE identifies as essential is Wisdom, Hootsuite’s proprietary AI technology, which the justification describes as trained on 12 years of historical social media data. According to ICE, Wisdom can analyze how conversations propagate across platforms, detect activity that deviates from established patterns, interpret platform-specific sentiment, and identify significant changes in online discussions. The agency distinguishes these functions from those of general-purpose AI systems, describing Wisdom as specifically developed to interpret social media behavior. ICE also requires integrated image and video recognition that can detect logos, scenes, objects, and other visual indicators embedded in social media posts. The justification says this capability enables the agency to identify relevant material that contains little or no accompanying text and therefore would not be captured by text-only monitoring tools. In its statement to Biometric Update, Carahsoft said Talkwalker’s visual analytics detect broad media attributes, including logos, objects, and scenes, rather than identifying people through facial recognition. ICE’s justification does not claim a facial recognition capability. The requirements extend to licensed data access across more than 30 social networks and approximately 150 million websites, blogs, forums, news outlets, podcasts, and review sources, with analysis in 187 languages. Those figures describe the platform’s asserted coverage, not the number of sources ICE actively monitors. Another requirement is automated message triage. The system must use AI to prioritize incoming public messages across official ICE social media accounts, route them to appropriate teams or field offices, and maintain records identifying who received each message and when. The procurement also calls for centralized publishing, scheduling, alerts, analytics, reporting, archiving, and mandatory approval workflows intended to prevent unauthorized publication from agency accounts. In a June 24 announcement, Hootsuite described Wisdom as an AI agent capable of turning live social media signals into actionabl

First reported Oct 13, 2026 19:45 UTCCatalog metadata updated Oct 14, 2026 04:13 UTCOpen evidence record
REPORT1 SOURCE

Land crossings remain the missing link in US biometric border system

Twenty-five years after 9/11, the U.S. biometric border is still a work in progress. While biometrics have become routine at huge scale, tallying more than 1 billion face checks, land-border entry-exit remains an unfinished piece, and an ongoing challenge. In a recent interview with the Biometric Update Podcast, Janice Kephart, who authored the foundational 9/11 Commission Report and Terrorist Travel Guidelines, says that the main challenge remaining is vehicular, but that pedestrian exits are also still incomplete. Customs and Border Protection (CBP), she says, is still testing pedestrian biometric exit, and has deployed biometrics for pedestrians at several key crossings. But “they’re not nearly as far as they need to be on vehicular.” Not that she’s blaming them: “it’s very understandable,” she says. “There’s never been any infrastructure for that,” and while the technology is getting better, “multiple people in a vehicle is a very difficult problem to solve on many levels.” That said, CBP is committed to solving it. This past September marked the federal deadline for biometric exit implementation. While it remains incomplete, the system has evolved to cover several key land crossings, and to reflect CBP’s aggressive push to collect biometrics and build profiles on foreign nationals leaving by land. Simplified Arrival achieves technical match rate of 99% Biometric border crossings are sold as fast and accurate, a system for reducing the irritant of friction and the hassle of handling documents. An article in The Travel, reporting on U.S. land crossings where CBP’s facial biometric lanes are already live, says the transition to biometrics “represents a major modernization effort aimed at balancing national security with the need for efficient movement across some of the busiest ports of entry in the world.” The piece cites official data from 113 of the 165 land ports of entry that currently utilize the Simplified Arrival face biometrics system. “The system has achieved a technical match rate of over 99 percent,” it says, ensuring that “most pedestrians and vehicle occupants can proceed through inspections with minimal delay.” Simplified Arrival deployments featured in the Travel profile include southern crossings at Progreso International Bridge, the San Ysidro Land Port of Entry in California, the Gateway International Bridge in Brownsville, Texas, the Juarez-Lincoln International Bridge in Laredo, and the Paso del Norte International Bridge connecting the downtown areas of El Paso and Ciudad Juarez. Northern border crossings include the Peace Bridge in Buffalo and the Pacific Highway Port of entry in Blaine, Washington. Momentum across the biometrics spectrum turns to land borders Recent developments at CBP, House Intelligence and within the industry show where policy is headed. A recent House Intelligence Committee review of the post-9/11 biometric architecture says the government still has not finished the job, concluding that “a comprehensive biometric entry-exit system remains one of the major unfinished pieces.” The International Biometrics and Identity Association (IBIA), meanwhile, wants Congress to expand biometric screening at U.S. land borders, fund comprehensive vehicle inspection systems, and impose enforceable restrictions on intelligence profiling. And, at the Progreso International Bridge, CBP is exploring the ultimate biometric verification solution for pedestrian crossings: a walk-through system that can capture people as they cross, without necessitating a stop. To make it happen, it has $3.45 billion appropriated to it through September 2029, under the Secure America Act. The evident takeaway is that the U.S. border control complex knows it has a land-crossing gap to plug – and, having spent 25 years laying foundations and implementing biometrics in air travel, it is now turning its attention to that gap. Reconfigured political relationships between t

First reported Oct 13, 2026 19:24 UTCCatalog metadata updated Oct 14, 2026 04:13 UTCOpen evidence record
REPORT1 SOURCE

Digital public infrastructure reshaping state-citizen relations in Africa, report warns

A new report from CIPESA (Collaboration on International ICT Policy for East and Southern Africa) finds that the expansion of digital public infrastructure (DPI) systems across 11 African countries could have significant implications for human rights, democratic governance and civic participation. The State of Internet Freedom in Africa 2026 report examines DPI developments in Egypt, Ethiopia, Ghana, Kenya, Nigeria, Senegal, South Africa, Tunisia, Uganda, Zambia and Zimbabwe. Governments across the continent are investing heavily in digital identity, payment and data-sharing systems to modernize public services and drive digital transformation. But the report argues that insufficient attention has been paid to the governance and human rights implications of these systems. It calls for stronger rights-respecting frameworks before DPI becomes further entrenched in public administration and everyday life. “Foundational credentials such as mandatory gateways and access to essential public and private services are increasingly facing flaws in architectural design and utility, technical failures, and inaccurate records,” the report claims in its conclusion. The result is often widespread exclusion of vulnerable groups, according to the report, particularly affecting people with limited digital skills, poor connectivity or difficulties accessing civil registration systems which include rural communities, women, children and the elderly. The report lists an extensive number of recommendations that can offset such problems. The recommendations include establishing robust governance such as rights-respecting national policies and laws, along with investment in complementary infrastructure to foster connectivity and capacity enhancement. It recommends replacing coverage-only targets with disaggregated meaningful-connectivity and service-completion indicators; stopping internet shutdowns and other blanket connectivity restrictions as tools of political or security management, among other suggestions. The full State of Internet Freedom in Africa 2026 report can be read here. The report was launched at the closing ceremony of the Forum on Internet Freedom in Africa (FIFAfrica26) held in Mauritius. Mauritius' Minister of Information and Communication Technology, Dr Avinash Ramtoh, described DPI as "a critical infrastructure in any forward-looking country" and stressed the need to ensure digital systems are inclusive, accessible and rights-respecting. The report's release marked the conclusion of FIFAfrica26, a four-day gathering that brought together policymakers, researchers, civil society organizations, journalists, technologists, activists and development partners from across Africa and beyond. Discussions focused on issues including AI, data governance, platform accountability, digital inclusion and security, and civic participation. A recurring message was that technology is inseparable from society and that decisions about the design, governance and use of digital systems have profound consequences for rights, participation and power. As Africa's digital transformation accelerates, the report argues that these questions will become increasingly important in shaping how citizens access services, engage with governments and exercise their rights in the years ahead.

First reported Oct 13, 2026 19:13 UTCCatalog metadata updated Oct 14, 2026 04:13 UTCOpen evidence record
REPORT1 SOURCE

Brivas sues Match Group, alleging use of FaceTec liveness detection infringes 8 patents

Nevada-based Brivas has filed a claim of patent infringement against Match Group, alleging the dating app maker used its proprietary biometric liveness detection technology without a license. The claims involve eight U.S. patents, all related to active liveness detection methods for confirming the person presented to the camera is real and present, rather than a photo, replay attack or deepfake. The patents include IP developed by Brivas as well as IP obtained in the company’s acquisition of New Zealand’s 3Fish a year ago. Brivas II was created in December of 2023 by Brivas Partner and Inventor Beau Parry and former TPL Group Chairman and CEO Dan Leckrone to commercialize the company’s biometrics portfolio, according to Wikipedia. Brivas and Brivas II have not launched any products or a website, and thus are considered non-practicing entities (NPEs). Match Group has long been a biometric liveness detection customer of FaceTec, and extended the company’s face biometrics to Hinge near the beginning of 2026. FaceTec is not named as a defendant in the lawsuit, however. The allegations were filed in the Northern District of Texas and are currently at the initial pleading stage. They involve patent numbers 9,600,649, 9,602,495, 9,740,848 in 2017, 10,049,203 in 2018, 10,565,362 and 10,587,601 in 2020, 11,245,693 in 2022 and 12,074,869 in 2024, developed by Brivas. Also included are the 9,602,495 and 10,587,601 patents acquired from 3Fish. At the time of the acquisition, Brivas described the 495 patent as the “primary active patent” in the 3Fish portfolio. The patents describe the measurement of a user’s physical movement as captured by a device’s camera and the comparison of that movement to the device’s motion sensors. Brivas alleges Match Group’s Face Check identity verification system directly and indirectly violates each patent. "A face on a screen is no longer proof of a person,” Brivas II Inventor Beau Parry told Biometric Update in an email. “We invented methods to prove a live human is present years before deepfakes made it urgent. We're enforcing those patents to protect our licensees and the value of that innovation." The complaint examines how FaceTec’s liveness detection works, and how the technology is applied across Match Group apps including Tinder, OKCupid, BLK and Upward. Brivas is seeking injunctive relief, as well as damages, attorney’s fees and costs.

First reported Oct 13, 2026 20:12 UTCCatalog metadata updated Oct 14, 2026 04:13 UTCOpen evidence record
REPORT1 SOURCE

ICE seeks voice biometrics to identify detainees, outside callers in AI surveillance system

U.S. Immigration and Customs Enforcement (ICE) is seeking technology to turn recorded detainee calls and live surveillance video into a searchable intelligence network capable of identifying speakers by their voices, tracking movements, and mapping relationships across detention facilities. The proposed AI system would build voice profiles without subjects’ cooperation, analyze conversations and behavior, and automatically connect findings to investigative records to reconstruct individuals’ activities and associations. The system would also analyze detainees’ behavior through continuous video surveillance, identify associations among individuals, detect potentially suspicious conversations, and automatically correlate information from otherwise separate detention and law enforcement systems to build investigative timelines and evidence packages. The proposed capability also could extend beyond people in ICE custody. The unusually detailed requirements are contained in a 73-page Performance Work Statement accompanying a Request for Information (RFI) that ICE published last week. The agency is seeking industry capabilities for what it calls an Integrated Intelligence Suite, designed for deployment across detention facilities operated by ICE, private contractors, and government partners. Among its most consequential requirements is the ability to create biometric voice profiles from existing recordings without a separate enrollment session, subject cooperation, or new recording equipment. Investigators could then search for potential matches regardless of the telephone number, account, personal identification number (PIN), or device used. Where available audio and government authorization permit, the system would compare the voice of someone receiving a detainee's call against a profile associated with the dialed number, potentially revealing call forwarding or other arrangements that obscure who is participating in a conversation. Investigators could also submit an approved recording obtained from another source, such as an interview or investigative tip, and search the authorized detention communications database for matching speakers. Where separately authorized, the system would support matching voices across participating agencies. The proposed system would not be limited to identifying speakers. ICE wants to combine potential voice matches with video footage, detainee-management records, housing assignments, movement histories, and incident reports, allowing investigators to identify relationships and reconstruct activity across multiple facilities. The procurement remains at the market research stage. ICE has not identified a selected contractor, contract value, deployment schedule, or the number of facilities that would ultimately use the system. Vendor responses are due October 26. A single system for reconstructing activity and associations Perhaps the most far-reaching element of the proposal is its requirement for automated correlation across different kinds of records. The system would extract and link names, aliases, telephone numbers, organizations, locations, communications, video events, and investigative information. ICE wants those connections represented as searchable relationships and timelines, with the evidence supporting each asserted connection available to investigators. The agency’s mandatory acceptance test illustrates what it expects. Starting with a flagged detainee communication, the system must present the recording, transcript, translation (when applicable), potential speakers, and any discrepancies in accounts. It must then retrieve relevant detainee records, identify related video events, and display connections among the people, locations, and events involved. The investigator could assemble a case record and export an evidence package containing supporting audio, video, metadata, relationships, and an audit trail without manually moving information between unrelated a

First reported Oct 13, 2026 19:49 UTCCatalog metadata updated Oct 14, 2026 04:13 UTCOpen evidence record
REPORT1 SOURCE

Biometrics Institute celebrates 25 years fostering responsible deployments

The Biometrics Institute is celebrating its Silver Jubilee as the world’s foremost organization for industry discussion and guidance at the group’s upcoming Congress in London and at a dedicated event in Canberra, Australia on November 25. Silver Jubilee Celebrations replace the Institute’s annual Showcase Australia with a half-day event of three sessions, brunch and informal conversation. The Biometrics Institute Congress and side events will be held in London from October 20 to 22. Congress events on the 20th and 21st will examine “A History of the Future of Biometrics,” asking the big question facing the industry and considering 25 years of industry change and development. Over its quarter-century history, the Biometrics Institute has developed and promoted resources including annual industry surveys, 23 Good Practice guides, Biometrics Explainer videos, the Biometrics Essentials educational tool and the Institute’s Three Laws of Biometrics. The Biometrics Institute community also contributed to the UN’s  “Compendium of Recommended Practices for Responsible Use & Sharing of Biometrics in Counter Terrorism.” The Biometrics Institute also released a concepts and solutions report called “Biometrics: Keeping it Real” to explore the relationship between digital identity and physical authenticity earlier this year. Former Leidos executive John Mears described the role of the organization and its place in the development of the broader biometrics industry: “The Institute fulfilled an essential role in facilitating world-wide collaboration between suppliers and users, particularly government users.  My own customers were predominantly government users, mostly in law enforcement, aviation security, and border security within the U.S., UK, and Australia. The collaboration gave customers confidence in sensitive deployments because of shared use cases, shared best practices, and guidelines developed by the Institute with member inputs.  Beyond the conferences, the workshops provided a forum for forthright exchanges under Chatham House rules, building comradery in a community that sometimes felt like it was under siege.” Comments from representatives for London’s Metropolitan Police Service and Australia’s Department of Home Affairs praised the group’s impact on biometrics education. “When I established the Biometrics Institute 25 years ago, the ambition was to create an independent forum where government, industry and academia could come together to address both the opportunities and challenges of biometrics,” says Biometrics Institute Founder Ted Dunstone. “It’s extraordinary to see how far the technology and the Institute have come, while the fundamental need for trust, evidence and responsible use remains as important as ever.” Biometrics Institute Chief Executive Isabelle Moeller noted that “the responsible use of machine learning technologies are now more important than ever,” and lauds the willingness of the community of professional experts to share the lessons learned from their experiences. Institute Chairman Jakob Glynstrup emphasized the organization’s role in fostering trust, dialogue and responsible innovation by bringing together people, groups and ideas. Robert Mocny, who pioneered America’s US-VISIT traveler fingerprinting program while with the U.S. Department of Homeland Security, credited the Biometrics Institute with giving DHS access to expertise to help with its research efforts, as well as fostering international cooperation.

First reported Oct 13, 2026 15:44 UTCCatalog metadata updated Oct 14, 2026 04:13 UTCOpen evidence record
REPORT1 SOURCE

CC-4865 - Critical Remote Code Execution Vulnerability in Citrix NetScaler

Severity: High CVE-2026-107406 could allow remote code execution or denial of service on vulnerable NetScaler deployments configured for SAML authentication. CVE-2026-107406 could allow remote code execution or denial of service on vulnerable NetScaler deployments configured for SAML authentication. Updated: 12 Oct 2026

First reported Oct 09, 2026 11:00 UTCCatalog metadata updated Oct 14, 2026 04:11 UTCOpen evidence record
REPORT1 SOURCE

CC-4857 - Critical RCE Vulnerability in F5 BIG-IP APM Under Exploitation

Severity: Medium Successful exploitation of CVE-2026-94127 may allow unauthenticated remote code execution against affected BIG-IP APM OAuth deployments Successful exploitation of CVE-2026-94127 may allow unauthenticated remote code execution against affected BIG-IP APM OAuth deployments Updated: 23 Sep 2026

First reported Sep 23, 2026 12:18 UTCCatalog metadata updated Oct 14, 2026 04:11 UTCOpen evidence record
REPORT1 SOURCE

CC-4862 - Active Exploitation of Citrix NetScaler ADC and NetScaler Gateway Vulnerability (CVE-2026-88779)

Severity: Medium Successful exploitation of CVE-2026-88779 could lead to denial-of-service (DoS) under specific deployment conditions Successful exploitation of CVE-2026-88779 could lead to denial-of-service (DoS) under specific deployment conditions Updated: 05 Oct 2026

First reported Oct 05, 2026 13:30 UTCCatalog metadata updated Oct 14, 2026 04:11 UTCOpen evidence record
REPORT1 SOURCE

CC-4861 - Critical Zero-Day Vulnerability in Cisco SD-WAN Manager

Severity: Medium Successful exploitation of CVE-2026-76504 could allow a remote attacker to bypass authentication by sending a crafted HTTP request to the API of the affected system Successful exploitation of CVE-2026-76504 could allow a remote attacker to bypass authentication by sending a crafted HTTP request to the API of the affected system Updated: 30 Sep 2026

First reported Sep 30, 2026 14:07 UTCCatalog metadata updated Oct 14, 2026 04:11 UTCOpen evidence record
REPORT1 SOURCE

CC-4866 - Ivanti Releases Security Updates for Connect Secure

Severity: Medium CVE-2026-104935 may allow unauthenticated remote code execution on affected Ivanti Connect Secure appliances CVE-2026-104935 may allow unauthenticated remote code execution on affected Ivanti Connect Secure appliances Updated: 13 Oct 2026

First reported Oct 13, 2026 15:43 UTCCatalog metadata updated Oct 14, 2026 04:11 UTCOpen evidence record
REPORT1 SOURCE

CC-4859 - Exploitation of Microsoft SharePoint Remote Code Execution Vulnerability CVE-2026-65660

Severity: Medium Exploitation of CVE-2026-65660 could allow an authenticated attacker with low-level access to an affected server the ability to execute code on the server Exploitation of CVE-2026-65660 could allow an authenticated attacker with low-level access to an affected server the ability to execute code on the server Updated: 28 Sep 2026

First reported Sep 28, 2026 12:55 UTCCatalog metadata updated Oct 14, 2026 04:11 UTCOpen evidence record
REPORT1 SOURCE

Version 2.0.0

This release includes the following changes: #418 Drops support for Python versions older than 3.5 #397 Drops python-dateutil dependency to just use built-in datetime instead #392, #402 Fixes bugs with deterministic ID generation #393 Fixes bug when using SSDEEP hashes #404 Fixes bug with "import *" #400 Fixes bug with pattern builder and STIX 2.0 Start/Stop timestamps #407 Fixes bug to allow granular markings with 'id' as selector #409 Fixes bug with 2.1 object reference properties #401 Fixes bug where some objects can be versioned and revoked that shouldn't #417 Improves efficiency of ListProperty

First reported Jul 06, 2020 20:48 UTCCatalog metadata updated Oct 14, 2026 04:09 UTCOpen evidence record
REPORT1 SOURCE

Version 3.0.1

This release includes the following changes: #513 Fixes check for reference properties to apply to all custom objects, not just custom observables (@maybe-sybr) #526 Fixes TAXIICollection queries to propagate HTTPErrors, not ignore them #528 Fixes bug where all TAXII filters were converted to exact matches

First reported Sep 24, 2021 13:39 UTCCatalog metadata updated Oct 14, 2026 04:09 UTCOpen evidence record

The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.

A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.