Published file metadata, source observations, indicators, and research history in one bounded catalog.
11Reachable catalog records
1 / 1Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
src_71fe315c8440c60a8fCollection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
11 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
While the full implementation of the Cyber Resilience Act (CRA) won’t take effect until December 2027, another critical milestone is already approaching much sooner. Starting from 11 September 2026, all manufacturers selling products with digital elements in countries of the European Union will be required to report actively exploited vulnerabilities in their digital products, as […]
First reported Sep 03, 2026 08:02 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
AI agents in your Entra ID tenant? They come with new identities, permissions, and fresh attack paths. Christian Feuchter breaks down Entra Agent ID security, security-relevant capabilities, control paths, abuse scenarios, and how to review your exposure with EntraFalcon.
First reported Jun 09, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
Automation platforms such as n8n are often introduced as productivity tools: connect a few systems, automate repetitive work, maybe add some AI. Inside a corporate network, however, that framing is incomplete. A self-hosted workflow engine can reach internal systems, execute actions on behalf of users, and hold sensitive credentials. That puts it in the same […]
First reported Jul 21, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
In this second part, we demonstrate how a Cyber Resilience Act (CRA) assessment is performed in practice. Using a low-cost IP camera as an example, we show how a product is classified, how threats are modelled, how hardware and firmware are analysed, and how compliance gaps against IEC 62443-4-2 can be identified. You may want […]
First reported Jul 07, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
Pipeleek 1.0 is here. What started as a GitLab pipeline secret scanner now covers seven CI/CD platforms and comes with helpers for runner exploitation, Renovate bot abuse, and lateral movement across repositories. This post walks through what is new, shows two real-world findings from the Tor Project and GitLab itself, and introduces the GitLab Attack Lab where you can try the full attack chain yo
First reported Aug 04, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
The Cyber Resilience Act (CRA) is a regulation introduced by the European Union to strengthen cybersecurity requirements for products with digital elements.In simple terms, the CRA sets mandatory cybersecurity rules for hardware and software sold in the EU. This includes everything from connected devices (IoT) to operating systems and even stand-alone software. Very important, this […]
First reported Jun 26, 2026 06:40 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
Introduction Pwn2Own is a renowned hacking competition organized by the Zero Day Initiative (ZDI), where security researchers demonstrate previously unknown vulnerabilities in popular software, operating systems, browsers, IoT devices, and other technologies. Having participated in both the 2023 and 2024 editions of Pwn2Own, we decided to take another shot in 2025. This time, our goal […]
First reported Oct 02, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
Some months ago, I performed a web application penetration test on an application that used passkey for authentication. As part of the assessment, I also tested the passkey implementation and noticed some unusual behavior. During the debugging process, I created two short JavaScript helper functions that can be used to hook the browser APIs involved in passkey operations, allowing the passkey conf
First reported Aug 25, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
I'm happy to announce that we are releasing the beta version of RAPTR, a fully open source, API driven collaboration platform built specifically for red and purple team engagements.
First reported May 11, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
SSH is a widely used protocol that provides secure access to remote systems. It enables encrypted communication, file transfers, command execution and shell access for system administration. Visit https://sshlabs.compass-security.training to learn more about SSH security.
First reported May 27, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence record
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.