public-research

Ricerca Pubblica Ricerche open source e interventi su threat intelligence, fingerprinting e rilevamento frodi. Interventi 10/25/2024 - Anti-Fraud W3 Community Group - Un'Analisi Empirica dei Proxy Residenziali 03/27/2025 - Anti-Fraud W3 Community Group - Mitigare l'Impersonificazione delle...

statecraftcyber

Statecraft Cyber Intelligence Plataforma de threat intelligence em português construída do zero como projeto pessoal de Blue Team. Agrega dados de fontes abertas globais e os transforma em briefings técnicos, notícias classificadas, CVEs enriquecidos e IOCs estruturados — tudo em PT-BR, atualizad...

BRIntelcollector

BRIntelcollector Panoramica BRIntelcollector è uno strumento di Cyber Threat Intelligence CTI focalizzato sugli indicatori di minacce nazionali del Brasile. Lo strumento consente di cercare e consolidare informazioni sulle minacce informatiche attraverso molteplici fonti di intelligence,...

awesome-threat-intelligence

awesome-threat-intelligence Una lista curata di risorse awesome per la Threat Intelligence Una definizione concisa di Threat Intelligence: conoscenza basata su prove, inclusi contesto, meccanismi, indicatori, implicazioni e consigli praticabili, riguardo a una minaccia o un pericolo esistente o...

threat-intel

threat-intel Dieses Repository enthält IoCs im Zusammenhang mit den öffentlichen Threat-Intelligence-Blogbeiträgen von Volexity. Öffentliche Blogbeiträge zu diesen IoCs finden Sie auf der Volexity-Website. In der Vergangenheit wurde dieses Repository auch zur Speicherung von Tools verwendet, die...

ThreatIntelligenceDiscordBot

Bot Discord per Threat Intelligence Il bot Discord per Threat Intelligence di vx-underground riceve aggiornamenti da vari domini clearnet, domini di attori ransomware e canali Telegram. Questo bot controlla gli aggiornamenti a intervalli di 1800 secondi tranne il bot Telegram, che riceve gli...

CVE-2026-77761

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

CVE-2026-77761

misp-stix is a Python library for converting STIX documents to MISP events. A parser state isolation flaw allows per-document state (galaxies, galaxy clusters, passive DNS records, references, package titles, dates, and timestamps) to persist across conversions when the same parser instance is re...

CVE-2026-76641

creationtimestamp| type| source ---|---|--- 2026-08-20 19:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlayjy62r...

MINI-95R3-QMJW-6R49

Bulletin has no description...

CVE-2026-71864

creationtimestamp| type| source ---|---|--- 2026-08-19 20:10:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthjyw5mu625 2026-08-20 00:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthwtxsbkf24...

CVE-2026-53958

creationtimestamp| type| source ---|---|--- 2026-08-18 23:01:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfd4xzxxc2m...

CVE-2026-19967

creationtimestamp| type| source ---|---|--- 2026-08-17 19:34:07+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtch2i3rf52t...

GHSA-XV5J-CWGJ-22R4

creationtimestamp| type| source ---|---|--- 2026-08-17 14:28:13+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mtbvxiltgl2e 2026-08-17 14:54:30+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mtbxginal224 2026-08-22 22:00:04+00:00| published-proof-of-concept...

CVE-2026-19957

creationtimestamp| type| source ---|---|--- 2026-08-16 22:54:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cms5luh2p4cjg...

CVE-2026-16099

creationtimestamp| type| source ---|---|--- 2026-08-16 06:01:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6j6jaucq2z...

Why API Discovery Is Critical for Modern AppSec Programs

Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure , and such exposure rarely gets tested. Attackers build their own inventory through live reconnaissance; they do not wait for your spreadsheet. API discovery must pul...

CVE-2026-58230

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:42+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-70345

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:47+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:18:31+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:44+00:00| seen|...

CVE-2026-70325

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:24+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:20+00:00| seen|...