Published file metadata, source observations, indicators, and research history in one bounded catalog.
Researchers demonstrated a WordPress attack using malicious HEIC uploads to trigger remote code execution on servers with vulnerable image-processing software.
First reported Oct 07, 2026 16:00 UTCOpen evidence recordProgress patched four Telerik Fiddler Classic vulnerabilities, including a high-severity flaw that can enable local privilege escalation and unintended code execution.
First reported Oct 07, 2026 09:00 UTCOpen evidence recordThe best AI model for application security depends on vulnerability detection, accuracy, cost, human review, data handling, and deployment needs.
First reported Oct 07, 2026 16:00 UTCOpen evidence recordA Texas AG filing says Oracle Health’s 2025 breach affected nearly 20 million people, while major questions about access and attribution remain.
First reported Oct 07, 2026 16:00 UTCOpen evidence recordCVE-2026-21589 is being exploited after a public PoC, putting self-hosted Jira, Confluence, Bitbucket and other Atlassian products at risk.
First reported Oct 07, 2026 16:00 UTCOpen evidence recordGoogle Chrome 155 fixes 247 security vulnerabilities, including four Critical use-after-free flaws. See what security teams should do now.
First reported Oct 07, 2026 16:00 UTCOpen evidence recordMidnight Blizzard is abusing hotel Wi-Fi captive portals to deliver malware and steal credentials from travelers, putting corporate devices and accounts at risk.
First reported Oct 07, 2026 16:00 UTCOpen evidence recordASOS is investigating unauthorized app notifications and possible customer data exposure. Learn what is confirmed and why messaging systems need protection.
First reported Oct 07, 2026 21:14 UTCOpen evidence recordGoogle’s October Android security update patches seven critical vulnerabilities, including flaws that do not require user interaction.
First reported Oct 07, 2026 16:00 UTCOpen evidence recordFake AI marketing sites impersonating ChatGPT, Gemini, Claude and Muse are stealing ad-account credentials and MFA codes through live phishing flows.
First reported Oct 07, 2026 13:14 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.