Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
AWS WAF logs are keeping receipts, including your session tokens. In this blog, we walk through the risk of default WAF logging configurations and the tool built to pull, analyze, and replay what gets left behind.
First reported Sep 01, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordAI doesn't let attackers walk through walls, but it makes finding the cracks more efficient. In this blog, we cut through the hype and explain what AI-driven offense really looks like and why hard controls still work.
First reported Aug 13, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordThe AWS access keys are in hand... now what? In Part 1 of this blog series, we break down AWS credential types, where to find them, and how to validate and use them during a security engagement.
First reported Sep 10, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordSpooNMAP used to hand you a list of open ports; the latest update tells you which ones actually matter. In this blog, we detail the new automated findings reporting, LLM detection, and performance improvements.
First reported Aug 25, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordLogging isn't a switch to flip; it's something to tune and maintain. In this blog, we outline a four-step Active Directory logging framework covering log sizing, audit policies, detection goals, and gap analysis.
First reported Oct 06, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordManufacturing knows what happens when IT and OT divide; AI governance is an unexpected chance to do it differently. In this blog, we walk through a unified governance model that bridges both before bad habits set in.
First reported Aug 18, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordMeet HashcatRosetta—the Hashcat rule decoder you didn't know you needed. In Part 2 of this blog series, we go through how it translates, analyzes, and optimizes rule files to maximize cracking efficiency.
First reported Oct 01, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordSix stages. Multiple encryption layers. One static analysis. In this blog, we unpack a multi-stage malware loader combining Python obfuscation, Donut shellcode, and laZzzy PE encryption, without executing the payload.
First reported Sep 17, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordMost LLM testing tools require setup, paid access, or internet; LLMHaxor requires none of that. In this blog, we walk through the latest update, including a new WebSocket adapter for modern streaming LLM applications.
First reported Sep 03, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordYou thought you knew hate_crack 👀 Well, version 2.0 changed that. In Part 1 of this latest blog series, we go through 13 new attack methods, menu restructuring, and local LLM integration.
First reported Sep 24, 2026 04:00 UTCCatalog metadata updated Oct 08, 2026 03:53 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.