REPORT1 SOURCE
Æ / PUBLIC MALWARE INTELLIGENCE
Follow the evidence.
Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
41 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
2 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Review source update dates and status
- intelligence_src_41b0e717a5dcd9b104Recent successful batchLast successful batch: Last attempt:
- intelligence_src_420792e718a7b22387Recent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
REPORT1 SOURCE
BOLA: Enumerating an Entire Employee Directory Through a Predictable ID
First reported Sep 08, 2026 14:55 UTCCatalog metadata updated Oct 14, 2026 09:16 UTCOpen evidence recordREPORT1 SOURCE
How I Tricked OpenClaw Into Attacking Its Own Network: A NAT64 SSRF Bypass
First reported Sep 17, 2026 04:44 UTCCatalog metadata updated Oct 14, 2026 09:16 UTCOpen evidence recordREPORT1 SOURCE
Insecure Firestore Security Rules & PII Exposure
First reported Sep 08, 2026 14:56 UTCCatalog metadata updated Oct 14, 2026 09:16 UTCOpen evidence recordREPORT1 SOURCE
Corridor — A Simple Web CTF That Made Me Look Twice
First reported Sep 08, 2026 14:50 UTCCatalog metadata updated Oct 14, 2026 09:16 UTCOpen evidence recordREPORT1 SOURCE
The Best Claude Code Setup for Bug Bounty Hunting
Turn Claude Code into a powerful bug bounty hunting assistant with MCP, custom skills, agents, tools and automated security workflows.Continue reading on InfoSec Write-ups »
First reported Sep 08, 2026 15:14 UTCCatalog metadata updated Oct 14, 2026 09:16 UTCOpen evidence recordREPORT1 SOURCE
Hackers heat up supermarket fridges, spoiling food across France
A cyberattack on supermarket temperature-control systems in France left spoiled food, empty shelves, and reports of fires.
First reported Oct 13, 2026 11:17 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
Phishing emails are baiting your AI assistant
If you use an AI assistant to summarize your inbox, hidden instructions could turn a phishing email you wisely ignored into your next to-do item.
First reported Oct 12, 2026 10:54 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
ASOS breach update: Hackers stole customer details and shopping searches
Stolen ASOS data includes shopping searches as well as personal details, so customers should watch out for convincing phishing messages.
First reported Oct 09, 2026 10:56 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
How “123456” became the key to almost 9 million personal records
A series of security failures, including a very weak password, exposed almost 9 million people’s personal information.
First reported Oct 12, 2026 12:34 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
ASOS “hackers” send push notifications to customers
ASOS customers received a push notification regarding a breach of the company. Here's what we know so far.
First reported Oct 06, 2026 14:11 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
A week in security (September 28 – October 4)
A list of topics we covered in the week of September 28 to October 4 of 2026
First reported Oct 05, 2026 07:01 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
Scammers know your name, and they’re counting on you to reply
Every reply to a scam text tells cybercriminals your number is active, which makes it worth more on the dark web and a better target for fraud.
First reported Oct 13, 2026 07:30 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
A week in security (October 5 – October 11)
A list of topics we covered in the week of October 5 to October 11 of 2026
First reported Oct 12, 2026 07:01 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
Grindr users’ sensitive data shared through ad auctions without valid consent
Advertising company Xandr has been fined $9.6 million over data sharing that could reveal Grindr users’ sexual orientation.
First reported Oct 13, 2026 13:00 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
Attackers hijack country-code domains to impersonate Google and other services
Cybercriminals compromised three country-code namespaces to get certificates that could help them impersonate trusted sites.
First reported Oct 08, 2026 15:53 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
Another ShinyHunters suspect arrested
The net is tightening around the Shiny Hunters cybercrime group following the reported arrest of a second member.
First reported Oct 07, 2026 10:03 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
Meta’s Muse AI files away your friendships, arguments, and secrets
Meta’s Muse AI builds personal dossiers that would make the FBI jealous. Even people who never signed up can get caught in its files.
First reported Oct 08, 2026 11:07 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
Google pauses open source bug bounty program after rise in AI submissions
Google has frozen its OSS VRP product vulnerability submissions to stop the flood of AI generated vulnerability reports.
First reported Oct 05, 2026 15:00 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
Amazon has an uncomfortably personal profile on you
Amazon thinks it knows your body, your family, and your life. You didn't sign up for it, and we couldn't find a way to opt-out.
First reported Oct 08, 2026 12:29 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
Facebook Marketplace scam uses your name and number
Facebook users are reporting receiving a message with a fake Facebook Marketplace listing that has their name as the seller.
First reported Oct 06, 2026 12:11 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
Proposed anti-Flock bills could spell trouble for license plate readers
Two sets of US lawmakers introduced bills in late September and early October to tackle the growing concerns about automated license plate readers.
First reported Oct 05, 2026 14:15 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
BlueKit puts account-hijacking tools in more criminals’ hands, making it easier to target you with convincing fake login pages and scam messages.
First reported Oct 07, 2026 10:54 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordREPORT1 SOURCE
Domino’s customers targeted in credential stuffing attacks
Domino's is warning customers by email that their accounts have been compromised in a credential stuffing attack.
First reported Oct 06, 2026 11:16 UTCCatalog metadata updated Oct 14, 2026 09:14 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.