Published file metadata, source observations, indicators, and research history in one bounded catalog.
10Reachable catalog records
1 / 1Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
src_49e3d32de063bf0c23Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
10 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes Microsoft has shipped out-of-band security updates for CVE-2026-96940, a high-severity (CVSS 8.8) weak authorization flaw in Exchange Server that lets an authenticated attacker escalate privileges and access other users’ mailboxes within the same organization, reading their messages and attachments. The bug does not a
First reported Oct 06, 2026 10:46 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes CISA has added a critical Fortinet FortiMail vulnerability, CVE-2026-104286 (CVSS 9.8), to its Known Exploited Vulnerabilities catalog after Fortinet confirmed in-the-wild attacks. The path traversal and NULL byte handling flaw lets an unauthenticated attacker write arbitrary files to the underlying
First reported Oct 02, 2026 14:19 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Hackers exploit Citrix NetScaler zero-day to deploy web shells Attackers have been exploiting the Citrix NetScaler zero-day CVE-2026-88772 since at least early September to gain root access, deploy custom web shells and tunneling malware, steal credentials, and move into internal networks at government, financial, education, legal, and professional services organizations across North America and E
First reported Oct 01, 2026 10:32 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier Citrix NetScaler administrators spent the weekend scrambling after attackers began exploiting a new zero-day, CVE-2026-88779, a high-severity memory overflow affecting NetScaler ADC and Gateway appliances configured as a SAML SP or IdP. The attacks surfaced when fully patched systems started rebooting on Friday, only da
First reported Oct 05, 2026 10:53 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation Citrix confirmed on September 27 that two critical flaws in NetScaler ADC and NetScaler Gateway, CVE-2026-88771 and CVE-2026-88772 (both CVSS v4 9.5), were exploited before any fix was public, and it shipped patches alongside six other vulnerabilities. The first lets an unauthenticated attacker run arbitrary […] The po
First reported Sep 28, 2026 10:31 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Australia Says OpenAI Agent Hacked Medicare Portal Australian Prime Minister Anthony Albanese revealed that an OpenAI agent gained unauthorized access to non-public parts of the government’s Medicare statistics portal on June 18 while conducting internal research into public medicine spending, repeatedly circumventing access blocks before reading files it wasn’t authorized to see. The disclosure c
First reported Sep 25, 2026 11:14 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation Dutch authorities have arrested Pepijn van der Stap, a convicted cybercriminal who used the online name “Umbreon,” on suspicion of helping the ShinyHunters group steal data and extort victims. Van der Stap went to prison over a 2023 extortion conviction and had recently described himself as […] The post InfoSec News Nuggets – 09/
First reported Sep 29, 2026 10:46 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services Attackers have been exploiting a critical Citrix NetScaler ADC and Gateway flaw, CVE-2026-88772, since at least early September, weeks before Citrix disclosed it along with seven other CVEs on Sunday. Google Threat Intelligence Group and Mandiant say government, financial services, education, legal and […] The
First reported Sep 30, 2026 10:42 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes A coalition led by Microsoft and Health-ISAC has shut down EvilTokens. The phishing service launched in February 2026 and compromised more than 12,000 inboxes at over 10,000 organizations. With a court order from the Eastern District of Virginia, and help from partners including […] The post InfoSec News Nu
First reported Sep 24, 2026 10:15 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
ASOS confirms data breach after “HACKED” in-app notifications UK fashion retailer ASOS confirmed a data breach on Tuesday after attackers abused a third-party customer communications platform to push an unauthorized “ASOS HACKED” alert to mobile app users around 5:00 a.m. ET, claiming they had fully compromised the company’s Snowflake instance and threatening to leak data […] The post InfoSec News
First reported Oct 07, 2026 10:48 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.