Published file metadata, source observations, indicators, and research history in one bounded catalog.
10Reachable catalog records
1 / 1Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
src_c570b513d6ee14d4f7Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
10 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
Every year, the security industry publishes benchmark reports built more or less the same way: pick a handful of common vulnerabilities, measure how often they show up, publish the percentages, and move on. We just finished our second year running one of those reports — and the most important thing we found wasn’t a percentage. […] The post Imperva API Security Token & Authentication Risk Report:
First reported Aug 13, 2026 09:19 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Executive Summary Imperva Threat Research identified a series of remote denial‑of‑service vulnerabilities in GraphQL Java, one of the most widely used libraries for GraphQL in the Java ecosystem. In this blog, we’ll deep dive into these vulnerabilities, analyze their impact, and provide recommendations to protect your environment. If your endpoints are protected by Imperva Web Application Firewall
First reported Sep 28, 2026 16:24 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Somewhere, an attacker is recording your encrypted traffic. Not breaking it. Recording it. The bet is patient and simple: store ciphertext today, wait for quantum computers to mature, decrypt at leisure. The industry calls it harvest now, decrypt later (HNDL), and it is the rare security threat with a believable deadline attached: data with a […] The post Harvest Now, Decrypt Later: The Attack You
First reported Oct 05, 2026 12:05 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
SQL parsers are critical components of the modern data stack. They validate queries before they reach the database, transpile between dialects, and lint codebases for style violations. Increasingly, they also power AI-driven SQL generation in LLM-integrated data tools. Our research focused on two popular Python-based parsers: SQLGlot and SQLFluff, both with around 10k GitHub stars each. These libr
First reported Oct 06, 2026 06:09 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Somewhere in your estate right now, a certificate is counting down to its expiry date. Today you probably know which one, because renewals still come around annually and someone owns the calendar. The industry is taking that comfort away: the CA/Browser Forum has voted to cut the maximum TLS certificate lifespan to 47 days by […] The post Bring Your Own CA: Introducing the Thales Imperva SSL Integ
First reported Aug 24, 2026 09:01 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
TL;DR: CVE-2026-75650, dubbed StyleSmuggler, is a critical vulnerability affecting Adobe Commerce and Magento Open Source. The vulnerability allows an unauthenticated attacker to inject malicious PHP code into Magento’s template system and achieve remote code execution. Adobe assigned the vulnerability a CVSS score of 10.0 and released an emergency hotfix after exploitation was observed in the wil
First reported Sep 10, 2026 17:43 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
This is Post 3 of a four-part series: Post 1: Agentic AI Security: The Chatbot Era Is Over Post 2: Generative AI Security: Why AI Needs a New Kind of Security Post 4: OWASP LLM Top 10 2026: Every Move Points the Same Direction When the OWASP Top 10 for LLM Applications arrived, it did […] The post The OWASP LLM Top 10 Was the Warm-Up: What Comes Next appeared first on Blog.
First reported Aug 16, 2026 04:23 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
This is Post 4 of a four-part series: Post 1: Agentic AI Security: The Chatbot Era Is Over Post 2: Generative AI Security: Why AI Needs a New Kind of Security Post 3: The OWASP LLM Top 10 Was the Warm-Up: What Comes Next The 2026 edition of the the OWASP Top 10 for LLM […] The post OWASP LLM Top 10 2026: Every Move Points the Same Direction appeared first on Blog.
First reported Sep 23, 2026 17:14 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Introduction AI-assisted development has crossed a threshold. The question is no longer whether your IDE communicates with an AI, it’s how deeply that AI is now wired into your local environment. The Model Context Protocol (MCP) is one of the plumbing behind this shift: a JSON-RPC-based protocol that lets AI assistants invoke tools running on your machine. From setting a breakpoint, to running tes
First reported Sep 25, 2026 15:51 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Somewhere in your organization is a spreadsheet of certificate expiry dates, and someone who owns it. That is not a caricature. DigiCert’s 2026 research with Omdia surveyed more than 400 senior IT leaders and found that 47% still rely on manual tracking methods such as spreadsheets, and only 34% have a complete, current view of […] The post 47-Day Certificates Are Coming: Five Things to Do Before
First reported Oct 05, 2026 13:25 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.