Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
59 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
intelligence_src_31ccd3a4f41f335250Recent successful batchLast successful batch: Last attempt:
intelligence_src_329c7052b8a81741e8Recent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.Today, we welcome the 48th government onboarded to Have I Been Pwned’s free gov service: Sri Lanka. Sri Lanka CERT now has access to monitor Sri Lankan government domains against the data in HIBP, helping identify exposed government accounts and respond when they appear in new data breaches.
First reported Aug 23, 2026 06:39 UTCCatalog metadata updated Oct 14, 2026 08:31 UTCOpen evidence record
Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.It does feel like I've bitten off too much and am now chewing like crazy this week. The 3D printing talk with Elle in Oslo, the "normal" NDC infosec talk, the cyber-broken talk with Scott in Copenhagen and then those ratbag hackers keep dumping more
First reported Sep 01, 2026 22:26 UTCCatalog metadata updated Oct 14, 2026 08:31 UTCOpen evidence record
Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I genuinely think I've nailed the IoT door lock situation! Well, Ubiquiti has, but I think I've worked out how to put it all into a residential house and have it make sense. There are a few basic tenets:Main power (never have to rely on
First reported Aug 24, 2026 04:19 UTCCatalog metadata updated Oct 14, 2026 08:31 UTCOpen evidence record
Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.Apparently, Aussies are so obsessed with coffee that it's referred to as the coffee capital of the world down here (some bits, at least). "But what about Italy?" people ask. Having spent a lot of time in a lot of Italy, no, it's just
First reported Aug 03, 2026 00:07 UTCCatalog metadata updated Oct 14, 2026 08:31 UTCOpen evidence record
Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I think what really resonates with me this week is being able to completely turn the tables on perceptions around things like AI being the big bad hacking tool the news would have you believe. There's the stat I talk about where it's had literally 0%
First reported Sep 11, 2026 20:37 UTCCatalog metadata updated Oct 14, 2026 08:31 UTCOpen evidence record
Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I remember the name of that AI doco now - The AI Doc: Or How I Became an Apocaloptimist. I was watching it on the long-haul flight home the other day, and what I found particularly engrossing was the polar-opposite opinions from a bunch of people: "it'
First reported Oct 13, 2026 10:47 UTCCatalog metadata updated Oct 14, 2026 08:31 UTCOpen evidence record
Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.I've started playing around with YouTube's "create video thumbnail", which hopefully will give me back a bit of time in my day (it used to be a manual job in Photoshop) and be a bit more interesting. And on that note, the imagery it&
First reported Sep 06, 2026 23:31 UTCCatalog metadata updated Oct 14, 2026 08:31 UTCOpen evidence record
Presently sponsored by: Where are your AI agents? Origin's sensor finds every install on your fleet, grouped by owner, including the ones your MDM never sees.The Origin Energy breach down here in Aus is all over the news this week, and as with many breaches, it's multi-faceted. You've got them leading with "don't worry, your credit card is fine", the hacker leading with "they didn&
First reported Jul 26, 2026 09:14 UTCCatalog metadata updated Oct 14, 2026 08:31 UTCOpen evidence record
The Sifalo Pay WordPress plugin before 2.5.3 does not verify that a payment transaction identifier belongs to the order it is confirming, nor that the requester owns that order, allowing unauthenti...
First reported Oct 14, 2026 06:00 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, allowing a site administrator on WordPre...
First reported Oct 14, 2026 06:00 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
Improper neutralization of special elements in the NetBird client SSH configuration manager (client/ssh/config/manager.go) in NetBird versions 0.60.0 through 0.74.6 allows a malicious or compromise...
First reported Oct 14, 2026 04:33 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.1.4 does not verify ownership of the email address used to select an abandoned-cart record before deleting or overwriting it,...
First reported Oct 14, 2026 06:00 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and o...
First reported Oct 14, 2026 07:43 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.
First reported Oct 14, 2026 03:59 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.3 via...
First reported Oct 14, 2026 07:43 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to ...
First reported Oct 14, 2026 06:00 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, and including, 1.4.5 due to insufficient inp...
First reported Oct 14, 2026 03:40 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values before printing them into an inline script on every page that embeds th...
First reported Oct 14, 2026 06:00 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which al...
First reported Oct 14, 2026 06:00 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-delete and passes it to C4::Scheduler::...
First reported Oct 14, 2026 07:23 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The SellKit WordPress plugin before 2.8.0 does not validate a client-supplied product price when totals are recalculated during checkout, allowing unauthenticated attackers to place orders for any ...
First reported Oct 14, 2026 06:00 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata' parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and ...
First reported Oct 14, 2026 03:40 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The WP Encryption WordPress plugin before 7.8.8.2 does not perform a capability or nonce check on one of the handlers that drives its SSL certificate-provisioning routine, allowing unauthenticated ...
First reported Oct 14, 2026 06:00 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users...
First reported Oct 14, 2026 06:00 UTCCatalog metadata updated Oct 14, 2026 08:28 UTCOpen evidence record
The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.