WhatBreach

WhatBreach WhatBreach is an OSINT tool that simplifies the task of discovering what breaches an email address has been discovered in. WhatBreach provides a simple and effective way to search either multiple, or a single email address and discover all known breaches that this email has been seen i...

SeekYou

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. SeekYou Unified host intelligence across 15 sources — Query any IP, domain, or ASN f...

cyber_rss

cyberrss cert 11 ASD ACSC Alerts Australia CERT-FR ANSSI CISA Cybersecurity Advisories CISA ICS Advisories CISA ICS Medical Advisories JPCERT/CC JPCERT/CC Blog UK NCSC All RSS Feed UK NCSC Guidance UK NCSC News UK NCSC Reports news 11 Bleeping Computer forum BleepingComputer CyberScoop Dark Readi...

ThreatLens

Investigate IPs, domains, hashes, and CVEs across 6 free threat intel APIs — without switching between browser tabs. Quick Start · Usage · Architecture · API Keys · Screenshots · Contributing 🚀 Proudly featured in the official Awesome OSINT repository. 📖 Overview ThreatLens is a single command-li...

domain-enumeration-sicarius

Sicarius 🐴 ⚡️ Fast subdomain enumeration tool 🐴 ⚡️ 🦆 @unp4ck 🪳🫠 Install git clone github.com/unp4ck/sicarius.git cd sicarius touch config/config.yaml add your apis keys here! pip3 install -r requirements.txt --user Post Installation API Key is needed before querying on third-party sites; Sicarius...

maltrieve

Stories in Ready Stories in In Progress | | | || | | |/ | | \ / | | | | | | | | | \ | | / | Maltrieve Maltrieve originated as a fork of mwcrawler. It retrieves malware directly from the sources as listed at a number of sites. Currently we crawl the following: Malc0de Malware Domain List Malware...

xurlfind3r

xurlfind3r xurlfind3r es una utilidad de línea de comandos diseñada para descubrir URLs de un dominio de manera simple y eficiente. Funciona recopilando información de una variedad de fuentes pasivas, lo que significa que no interactúa directamente con el objetivo sino que recopila datos que ya...

opencve

¿Qué es OpenCVE? OpenCVE es una plataforma de inteligencia de vulnerabilidades que te ayuda a monitorear y gestionar CVEs de manera eficiente. Agrega vulnerabilidades de múltiples fuentes MITRE, NVD, RedHat, Vulnrichment... y te permite filtrar, rastrear y organizarlas por proveedor, producto,...

Hieronym: Leveraging Hierarchical Multi-Source Information for Function Renaming in Stripped Binary

Function renaming in stripped binaries can substantially assist reverse engineers by improving code readability, yet it is a challenging task. The difficulty stems from the need to accurately capture function semantics from low-level binary code across diverse instruction sets, architectures, and...

CVE-2026-62645

creationtimestamp| type| source ---|---|--- 2026-09-08 10:07:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muyrn57bab2n 2026-09-08 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117234953398567351 2026-09-08 10:30:27+00:00| seen|...

opencve v3.1.0

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework

While retrieval-augmented generation systems partially address the hallucination issues in large language models, it also introduces new vulnerabilities to knowledge corruption attacks. Adversaries exploit these vulnerabilities by poisoning documents provided by RAG system to manipulate LLM...

[SECURITY] Fedora 43 Update: btrbk-0.32.7-1.fc43

Backup tool for btrfs sub-volumes, using a configuration file, allows creation of backups from multiple sources to multiple destinations, with ssh and flexible retention policy support hourly, daily, weekly, monthly...

[SECURITY] Fedora 44 Update: btrbk-0.32.7-1.fc44

Backup tool for btrfs sub-volumes, using a configuration file, allows creation of backups from multiple sources to multiple destinations, with ssh and flexible retention policy support hourly, daily, weekly, monthly...

CVE-2026-14439

creationtimestamp| type| source ---|---|--- 2026-07-02 00:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/116847439777806282 2026-07-02 00:00:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpmpzrqsr62v 2026-07-02 00:51:20+00:00| seen|...

Poisoned Playbooks: Demystifying Knowledge Poisoning Effects on AI Security Agents

AI security agents increasingly rely on Retrieval-Augmented Generation RAG to use external security knowledge for vulnerability analysis and exploit reasoning. This creates a new risk: poisoned write-ups can be operationalized into incorrect exploit behavior. Yet, prior work on RAG poisoning has...

CVE MCP Server 0.2.0

CVE MCP Server is a production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in seconds...

FuseChain: Runtime Evidence Reconstruction for Software Supply-Chain Attacks

Software supply-chain SSC attacks are increasingly multi-stage, cross-source, and temporally distributed. A single attack campaign may leave weak and fragmented traces across multi-source telemetry that captures different granularities and perspectives of runtime behavior. Existing runtime...

Introducing EvidenceForge: Synthetic security logs that don’t look (as) fake

Security teams need high-quality, labeled datasets to train threat hunters and incident responders, validate detection logic, and develop robust analytic models. EvidenceForge helps teams overcome the limitations of anonymized or stale public datasets, while avoiding the cost and complexity of...

CVE-2026-8631

creationtimestamp| type| source ---|---|--- 2026-05-20 23:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmczckzmul2v 2026-05-21 00:02:47+00:00| seen| https://infosec.exchange/users/offseq/statuses/116609622652943472 2026-05-21 20:20:34+00:00| seen|...