Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations, indicators, and research history in one bounded catalog.

20Reachable catalog records

1 / 1Current catalog page

24Maximum records per page

0Samples downloaded by this page

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.

Review source update dates and status

src_7fd6f1a21c8fbcbffcCollection status unverifiedLast successful batch: Unverified

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.

20 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED

REPORT1 SOURCE

TCP 148: Codex Exploited at Pwn2Own, LLM Safety Checks Bypassed, and Armadin Raises $255.5M

Google pauses OSS bug reports, attackers test stolen AWS keys for AI access, and Prolexic’s founder is back with doxx.net.

First reported Oct 07, 2026 17:02 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

Anthropic sues Abnormal AI, Ransomware AI Intern, and 2003 AI SOCs

Anthropic picks a weird fight with Abnormal; AI ransomware gets a human-shaped asterisk; Robinhood rebuilds access approvals; Straiker, Runlayer, and Nebulock raise into the agent and AI security wave

First reported Jul 08, 2026 14:31 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

TCP 142: Taiwan Hit by AI-Assisted Attack, OpenAI’s Training Pause, and $2.74B in Capital

Plus private firms on cyber offense, Lazarus burns a Windows zero-day, and Walmart’s purple teaming approach.

First reported Aug 20, 2026 14:20 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

TCP 143:Cursor Goes Post-Access, Echo Picks Up Key Minimus Assets, and 700 Agents Coordinate

Plus a cybercrime takedown, a patch redo, new defenses for Android 17, and more

First reported Sep 02, 2026 12:18 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

TCP 144: LG’s TV Privacy Mess, CrowdStrike’s SecOps Push, and $245M Before Beta

Palo Alto’s reported $500M Console deal, ClickHouse buys RunReveal, and a WeChat worm that needs no clicks.

First reported Sep 11, 2026 15:35 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

TCP 145: Stolen AI keys fund more hacking, AI slowdown theater, and Splunk’s next move

AI agents reach domain admin, Cisco patches an email-to-root bug and a legal AI company buys into security.

First reported Sep 16, 2026 14:13 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

A Field Guide to AI Tooling Visibility

What Claude Code, OpenAI Enterprise, Codex, Cursor, and Google Gemini log, what they don’t, and where defenders should start.

First reported Jul 15, 2026 17:57 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

Opus causes $3B Zcash wipeout; $1B+ in funding; and 38 fwd:cloudsec talks

Fable 5 lands, Datadog drops 100+ features, and Kramer and Kurtz show up on the same cap table.

First reported Jun 10, 2026 14:37 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

2026 Hacker Summer Camp Field Guide

My picks for the talks, side events, and Vegas side quests

First reported Jul 28, 2026 22:21 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

TCP 141: Black Hat + DEF CON 2026 Recap: Inside the Hugging Face Breakout, North Korea's Back End, and $1.27B in Funding

The research, launches, funding, and deals worth digging into from Hacker Summer Camp.

First reported Aug 11, 2026 15:05 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

CRWD and PANW Earnings Report; Mythos Expands; and MSRC Threatens Researcher

Plus: Security funding is up, Bumblebee lands, Cyera eyes $12B, and Dragos moves deeper into xIoT.

First reported Jun 04, 2026 14:14 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

TCP 140: I Wrote a Book on AI Logging, Runlayer Sues Rippling, and Cyera Bets $1B

Wiz says Atlas found 200+ unknown vulns, Google reset threat actor naming, and 7AI federated search.

First reported Jul 29, 2026 14:03 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

ZScaler earnings cause security stocks to tumble, Wiz puts data to supply chain risk, and the Megalodon strikes

Another week of supply chain pressure, AI data security bets, and one reminder that cyber’s public market rally leaves little room for deceleration.

First reported May 27, 2026 13:22 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

The SOC Readiness Pyramid for Agentic Threat Hunting

Agents do not replace maturity. They consume it.

First reported Sep 22, 2026 15:27 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

TCP 147: Cribl Joins the SIEM Party, NVIDIA Puts Agents on a Leash, Island Lands $400M

Microsoft brings SIEM to Defender, ShinyHunters slips past WAF rules, and an OpenAI agent takes the DNS route.

First reported Sep 30, 2026 13:04 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

TCP 146: Oktane Updates, Gemini Joins the Party, and Cyera Adds $400M

Jamf and Upwind go shopping, Jev makes AI decisions dirt cheap, and compromised AI packages target developer credentials.

First reported Sep 23, 2026 18:55 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

AI Sandboxes Get Pwned, Unicorn Gets Launches, and Open-Weight Warfare

OpenAI models broke containment, Glow launched at $1.2B valuation, and Kimi K3 poured gas on the open-weight fight.

First reported Jul 22, 2026 15:37 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

A 6x CISO on the era that security just entered

The Hygiene Era is here, and the boring work is now the moat.

First reported Jun 23, 2026 13:56 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

It was all a Fable; Identiverse news; and another Copilot makes old bugs new again

Anthropic FAFOs, while Ent raised a monster seed, Copilot got a one-click exfil chain, and identity vendors bought into agent security.

First reported Jun 17, 2026 14:50 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

REPORT1 SOURCE

Patch the Planet, drain the CRMs, buy the OT

Klue's OAuth compromise exposed Salesforce data across the security vendor bench; Accenture spends $4.175B on Dragos, runZero, and NetRise; Cisco picks up WideField for Splunk's agentic SOC.

First reported Jun 24, 2026 12:57 UTCCatalog metadata updated Oct 08, 2026 03:52 UTCOpen evidence record

A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.