Published file metadata, source observations, indicators, and research history in one bounded catalog.
21Reachable catalog records
1 / 1Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
src_cdcffed32aa78fd61fCollection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
21 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
Independent security experts see the EU Cyber Resilience Act (CRA) reshaping international technology markets to emphasize cyber resilience from the ground up, thereby testing the operational capacities of technology vendors whose wares compete in those markets. The EU CRA introduces mandatory reporting within 24 hours for any actively exploited vulnerabilities or severe incidents affecting produc
First reported Oct 02, 2026 08:25 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
Citrix has warned customers about another high-severity vulnerability in its NetScaler ADC and NetScaler Gateway products, just days after the company urged them to fix a separate batch of flaws that included two actively exploited zero-days. The new vulnerability, tracked as CVE-2026-88779, is a memory-overflow issue that can cause a denial-of-service (DoS) condition on affected appliances. Citri
First reported Oct 05, 2026 12:14 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
Gartner recently released a new category of security tools: the Integrated Security Operations Center (ISOC). This new category acknowledges the need to expand beyond traditional SIEM tools in the creation of a security portfolio, though, as they note in the introductory report, Security Information and Event Management (SIEM) isn’t going anywhere. Gartner’s evolution away from SIEM as an all-enco
First reported Oct 06, 2026 09:00 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
In its roughly 30-year history, the CISO role has been reshaped by waves of new technology and rising cyber threats. In many organizations, CISOs now own risk reporting, information risk management, threat monitoring, cyber risk accountability and governance, and security strategy. And as AI and digital dependence grow, the CISO’s remit is growing beyond security controls. The latest IANS State of
First reported Oct 05, 2026 08:25 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
GitHub Copilot CLI can be made to read sensitive files from a developer’s machine and send their contents to an attacker from a single web page. Security researchers at Adversa AI said the new attack technique, dubbed Cryptographic Context Injection (CCI), hides malicious instructions inside encrypted content. These instructions are treated as trusted context when Copilot CLI decrypts the content
First reported Oct 07, 2026 11:47 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
A newly-disclosed critical flaw in Atlassian’s data center software has a remarkably wide reach, affecting eight core products across the company’s enterprise portfolio. CVE-2026-21589, rated 9.3 (critical) in severity, is an arbitrary file access vulnerability that could allow an attacker with no login access to read files in web app root directories that they should not otherwise see, and potent
First reported Oct 07, 2026 01:51 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
In infrastructure and security programs, I have watched visibility projects follow a familiar path. The first dashboard feels like progress. Then the data grows, ownership blurs and the team discovers that visibility without identity and action has become another estate to operate. Bill-of-materials programs are reaching that point now. Most CIOs know the Software Bill of Materials, or SBOM. It he
First reported Oct 07, 2026 09:00 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
A new Linux backdoor is turning vulnerable internet-facing devices into remotely controlled proxy nodes, while using the public Session Traversal Utilities for NAT (STUN) infrastructure to blend into normal VoIP and WebRTC traffic. Fortinet’s FortiGuard Labs said it has been tracking the malware, dubbed ClingSTUN, across multiple attacks exploiting known vulnerabilities in routers, IoT devices, DV
First reported Oct 06, 2026 11:49 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
With typical cybersecurity exposure, I can conduct pen testing with deterministic tools. I am able to predict how a piece of software is going to respond. I even stand a decent chance of finding vulnerabilities before they can be exploited against me. What we are dealing with now is a new kind of exposure. For LLMs and AI models, there are invisible risks that are unscannable and virtually undetec
First reported Oct 02, 2026 09:00 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
SonicWall has disclosed yet another critical flaw in one of its core products. CVE-2026-102255, rated 10 in severity, the highest possible on the Common Vulnerability Scoring System (CVSS), is a pre-authentication server-side request forgery (SSRF) vulnerability in the SMA1000 Appliance Work Place interface. An unintended access path could allow attackers to order the appliance to issue requests o
First reported Oct 08, 2026 03:19 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
The rise of AI has CISOs facing even more vulnerabilities than ever, resulting in increasingly difficult decisions around what fixes to prioritize. “When I was a CIO, the hardest part of my job was deciding what not to do,” Snehal Antani, CEO of pentesting platform Horizon3.ai, tells CSO. “And if I chose not to fix a vulnerability because I didn’t have the resources or I didn’t think it was import
First reported Oct 07, 2026 08:25 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
The theft of FBI employee data by hacking group ShinyHunters, and the subsequent shutdown of the FBI’s Peoplesoft-based jobs portal, is causing concern for enterprise users of the Oracle product, with analysts recommending extreme measures in response. Law enforcement has made some progress in its pursuit of the cyber criminals involved, but there has still been no official word from either the FB
First reported Oct 06, 2026 01:02 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
The fastest-growing category of enterprise software right now is also the least scrutinized from a security standpoint. AI application platforms — tools that let teams build, connect and automate AI-powered workflows without writing much code — are landing in production environments faster than security teams can assess them. They connect to your APIs, your databases, your cloud credentials and yo
First reported Oct 06, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
Anthropic is expanding its Cyber Verification Program to give more security teams access to advanced cyber capabilities with reduced safeguards on its most advanced AI models. The expanded program has three access tiers based on the type of cybersecurity work an organization is authorized to perform. The tiers cover defensive security work, authorized red teaming, and testing of systems that could
First reported Oct 07, 2026 12:58 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
Denmark is reviewing security controls around its national citizen registry after unauthorized parties exploited a company’s access credentials to harvest records on approximately 8.8 million people over a 10-day period. The breach covers people living in Denmark as well as individuals who have died or moved abroad, while people with protected names and addresses were not affected. The unauthorize
First reported Oct 07, 2026 12:32 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
AI is accelerating the discovery of software vulnerabilities, but it is also creating a new bottleneck for defenders: deciding which machine-generated findings warrant investigation. Google has decided to temporarily stop accepting certain bug bounty submissions after a surge of largely invalid automated reports highlights a growing challenge for security teams as AI-driven vulnerability discovery
First reported Oct 06, 2026 10:10 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
When Anthropic CEO Dario Amodei urged other leading AI labs to “pace the frontier” last week, his calls for caution were echoed by other prominent voices in tech. Both Sam Altman and Elon Musk agreed with Amodei’s assessment that pausing AI development was essential to prevent the extinction of the human race. Amodei listed several potential disasters that could arise from unchecked AI development
First reported Oct 06, 2026 11:00 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
Attackers are increasingly weaponizing already-disclosed flaws rather than new zero-days, and AI tools may be accelerating how quickly they do it. According to a report from Google’s Threat Intelligence Group (GTIG), attackers have exploited more vulnerabilities in the wild thus far this year than they did all of last year. With the number of flaws disclosed each month sharply rising, AI tools are
First reported Oct 06, 2026 08:25 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
Dell’s security team has had a busy week. The company has announced a slew of Common Vulnerabilities and Exposures (CVEs) impacting its Dell Container Storage Modules (CSM) and Dell System Update (DSU). Disclosed by Dell in two security notices, these critical vulnerabilities could allow unauthenticated attackers to “completely bypass” authentication controls, gain root access, manipulate storage
First reported Oct 06, 2026 01:25 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
The US Federal Bureau of Investigation has removed an Accenture contractor working on its PeopleSoft installation over their role in a data breach that exposed personal details of FBI employees, Reuters reported Monday. This is the first time that anyone other than the hacker group Shinyhunters that claimed responsibility for the breach has linked it to PeopleSoft. “To date, our review has determi
First reported Oct 06, 2026 18:26 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence record
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.