Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads. [...]
First reported Oct 07, 2026 15:04 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordMicrosoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month. [...]
First reported Oct 07, 2026 15:44 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordAtlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. [...]
First reported Oct 06, 2026 17:34 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordHackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone after compromising third-party operators and modifying authoritative DNS records. [...]
First reported Oct 07, 2026 20:50 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordA critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. [...]
First reported Oct 07, 2026 12:49 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordA new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor authentication (MFA) codes through browser-in-browser attacks. [...]
First reported Oct 06, 2026 15:16 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordRansomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach. [...]
First reported Oct 07, 2026 14:01 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordUK fashion retailer ASOS confirmed a data breach Tuesday after hackers sent unauthorized push notifications through its mobile app while claiming to have stolen customer data from the company's Snowflake environment. [...]
First reported Oct 06, 2026 16:33 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordHackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts. [...]
First reported Oct 06, 2026 21:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordAdvantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data. [...]
First reported Oct 07, 2026 10:27 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordThe owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data. [...]
First reported Oct 07, 2026 23:04 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordThe FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]
First reported Oct 07, 2026 21:28 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordSonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances. [...]
First reported Oct 07, 2026 11:37 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordOn the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days. [...]
First reported Oct 06, 2026 19:21 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordA North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme. [...]
First reported Oct 07, 2026 10:35 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.