Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
How do you help the C-Suite understand the business risks of cybersecurity? Put them in the equivalent of a cybersecurity escape room.
First reported Aug 30, 2022 15:35 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordEven with 99.95% efficacy of network security controls, bad actors can still monetize fraud. Security convergence is the way forward in surviving digital fraud.
First reported Apr 01, 2021 17:52 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordScans continue against remote logins like VNC, RDP, and SSH, as well as MySQL and Elasticsearch. And what’s going on in Malaysia and Lithuania?
First reported Dec 01, 2021 20:54 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordA new wave of client-side attacks bypasses enterprise defenses.
First reported Dec 05, 2025 18:52 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordEven URLs that look legitimate can be fake, so train, train, train your users to verify links before they click.
First reported Apr 25, 2017 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordSecurity breaches in the news serve as a good reminder to check and make sure you have a solid application protection strategy in place, starting with never trusting user input.
First reported Oct 04, 2017 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordThe rather old CVE-2017-9841, an RCE in PHPUnit, suddenly jumps to the top of our list, with an increase of nearly 400% since last month. We dig into the scanning infrastructure.
First reported Jul 25, 2024 10:33 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordWe added another signature (for CVE-2020-0618) and we take a look at a cred stuffing attack from last month. One formerly prevalent CVE has disappeared entirely, and we investigate why that happened.
First reported Oct 18, 2023 10:32 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordThese are the top threats you should know about this week.
First reported Feb 10, 2026 15:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordAnonymous commoditizes well-known DDoS attacks by making easy-to-use tools, available to even the most unsophisticated user.
First reported Jun 01, 2016 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordSETTINGS frame abuse and Slow POST attacks in HTTP/2 can lead to CPU and memory exhaustion.
First reported Apr 29, 2019 15:07 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordCyber crooks use several common URL disguising techniques to trick users into thinking their sham sites are legitimate.
First reported Aug 29, 2017 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordData manipulation is a real threat to data-driven approaches at enterprises. We tested one of our own assets to see the possibilities.
First reported Jan 13, 2021 14:50 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordApplication programming interfaces (APIs) are a growing attack surface, offering predators unprecedented access to large data stores. As serverless, mobile, and online platforms grow, API attacks will surely rise.
First reported Nov 27, 2018 13:39 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordSecurity must align to the business needs, not the other way around. Begin with investigation and understanding to be most effective.
First reported Oct 17, 2017 07:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordBroken API authentication is leading to avoidable security incidents and unusual impacts. Learn what you can do to control the risk.
First reported Sep 01, 2020 18:55 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordThese are the top threats you should know about this week.
First reported Jul 08, 2026 18:21 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordRansomware is ramping up, especially in the public sector. The key to stopping these attacks is to focus on the ransomware attack vectors.
First reported Sep 05, 2019 19:39 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordMITRE ATT&CK, a framework that uniquely describes cyberattacks from the attacker’s perspective, is quickly being adopted by organizations worldwide as a tool for analyzing threats and improving security defenses.
First reported Jun 10, 2021 16:42 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordSeriously, how many colors are there? And how many of us share the same love of one of those limited choices?
First reported Nov 21, 2017 08:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordSensor Intel Series: July 2026 CVE Trends
First reported Jul 20, 2026 18:09 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordAttackers used two top ASNs to broadly distribute IP addresses in an attempt to camouflage attack traffic targeting Middle Eastern systems.
First reported Mar 11, 2020 13:40 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordExamining three breach and compliance failure cases under the New York Department of Financial Services’ 23 NYCRR Part 500 cybersecurity regulation.
First reported Jun 30, 2021 16:31 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordIn our 2020 edition of the Phishing and Fraud Report, we focus on how cybercriminals build and host phishing sites, the tactics they use to avoid detection, and how they’ve capitalized this year on the COVID-19 pandemic.
First reported Nov 11, 2020 13:00 UTCCatalog metadata updated Oct 13, 2026 07:58 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.