// INTEL ARCHIVE //

DIGIFEED

Authorized digital forensics and threat intelligence repository. Auto-updated daily with verified releases and digests.

LAST SYNCED: 27 JULY 2026, 04:13 UTC

DAILY INTELLIGENCE BRIEF

62
Sources Checked
87
New Articles
6
Critical CVEs
2
Known Exploited
25
Tool Releases
23
Threat Reports
The 11th Annual Volatility Plugin Contest! DFIR Articles
🧠 Volatility Labs 18 Jul 2023 1 min read

The 11th Annual Volatility Plugin Contest!

We are excited to announce that the 11th Annual Volatility Plugin Contest is now open!

#dfir #analysis
Case 001 Super Timeline Analysis DFIR Articles
🧠 DFIR Madness 12 Apr 2021 1 min read

Case 001 Super Timeline Analysis

Reading Time: 24 minutes Case001 Super Timeline Creation and Analysis Before Starting this lab it is strongly recommended you examine the memory, autoruns, pcap, or logs first. Come to this lab with indicators to search for.

#dfir #analysis
From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion DFIR Articles
📝 The DFIR Report 29 Sep 2025 1 min read

From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion

Key Takeaways Private Threat Briefs: 20+ private DFIR reports annually. Contact us today for pricing or a demo!

#dfir #analysis
Case 002 – Tyler Hudak’s Honeypot DFIR Articles
🧠 DFIR Madness 11 Dec 2021 1 min read

Case 002 – Tyler Hudak’s Honeypot

Reading Time: 3 minutes Case 002 – Hudak’s Honeypot The Case of The Forgotten Honeypot Readme: The best way to introduce this is to start with the README from Tyler: This Ubuntu Linux honeypot was put online in Azure in early October with the sole purpose of watching what happens with those exploiting […] The post Case 002 – Tyler Hudak’s Honeypot appeared first on DFIR Madness .

#dfir #analysis
Impact of AI on cyber threat from now to 2027 DFIR Articles
🇬🇧 NCSC UK Threat Reports 07 May 2025 1 min read

Impact of AI on cyber threat from now to 2027

An NCSC assessment highlighting the impacts on cyber threat from AI developments between now and 2027.

#dfir #analysis
ACD - The Sixth Year DFIR Articles
🇬🇧 NCSC UK Threat Reports 06 Jul 2023 1 min read

ACD - The Sixth Year

Key findings and full report from the 6th year of the Active Cyber Defence (ACD) programme.

#dfir #analysis
The threat from commercial cyber proliferation DFIR Articles
🇬🇧 NCSC UK Threat Reports 19 Apr 2023 1 min read

The threat from commercial cyber proliferation

Report informing readers about the threat to UK industry and society from commercial cyber tools and services.

#dfir #analysis
Direct deconvolution of unknown DNA profiles in a 2-person mixture for use in investigative forensic genetic genealogy Forensics
🧬 FSI: Genetics 27 Jul 2026 1 min read

Direct deconvolution of unknown DNA profiles in a 2-person mixture for use in investigative forensic genetic genealogy

Publication date: January 2027 Source: Forensic Science International: Genetics, Volume 86 Author(s): Chelsea Lennartz, Sarah Radecke, Philip Fremont-Smith, Adam Michaleas, Martha Petrovick, Joana Antunes, June Snedecor, Gothami Padmabandu, Kathryn Stephens, Natalie Damaso

#forensics #science
The New Detectives: Case Studies in Forensic Science (1996) - IMDb Forensics
🔬 Google News: Forensic Science 27 Jul 2026 1 min read

The New Detectives: Case Studies in Forensic Science (1996) - IMDb

The New Detectives: Case Studies in Forensic Science (1996) IMDb

#forensics #science
Bones Was Based On A Series Of Popular Novels And A Real Forensic Scientist - TVLine Forensics
🔬 Google News: Forensic Science 26 Jul 2026 1 min read

Bones Was Based On A Series Of Popular Novels And A Real Forensic Scientist - TVLine

Bones Was Based On A Series Of Popular Novels And A Real Forensic Scientist TVLine

#forensics #science
New Fresno-based training teaches first responders to find human remains after wildfires - KVPR Forensics
🦴 Google News: Forensic Anthropology 06 May 2026 1 min read

New Fresno-based training teaches first responders to find human remains after wildfires - KVPR

New Fresno-based training teaches first responders to find human remains after wildfires KVPR

#forensics #science
Microscopy in Forensic Pathology Forensics
🔬 Google News: Forensic Pathology 05 Feb 2026 1 min read

Microscopy in Forensic Pathology

Microscopy in Forensic Pathology Lab Manager

#forensics #science
UCF Researchers Create the “Fantastic Four” Chemical Standards for Forensic Science - University of Central Florida Forensics
🧪 Google News: Forensic Toxicology 06 Jan 2026 1 min read

UCF Researchers Create the “Fantastic Four” Chemical Standards for Forensic Science - University of Central Florida

UCF Researchers Create the “Fantastic Four” Chemical Standards for Forensic Science University of Central Florida

#forensics #science
Critical tips and trace evidence lead to arrest in 2023 Tigard hit-and-run investigation - KATU Forensics
🔍 Google News: Trace Evidence 06 Jan 2026 1 min read

Critical tips and trace evidence lead to arrest in 2023 Tigard hit-and-run investigation - KATU

Critical tips and trace evidence lead to arrest in 2023 Tigard hit-and-run investigation KATU

#forensics #science
Blood Stain Pattern Analysis in Forensic Science - Legal Desire Media and Insights Forensics
🩸 Google News: Bloodstain Pattern 08 Nov 2025 1 min read

Blood Stain Pattern Analysis in Forensic Science - Legal Desire Media and Insights

Blood Stain Pattern Analysis in Forensic Science Legal Desire Media and Insights

#forensics #science
Latent fingerprint recovery on submerged non-porous surfaces using phloxine B-based small particle reagent - Nature Forensics
🖐️ Google News: Latent Prints 08 Oct 2025 1 min read

Latent fingerprint recovery on submerged non-porous surfaces using phloxine B-based small particle reagent - Nature

Latent fingerprint recovery on submerged non-porous surfaces using phloxine B-based small particle reagent Nature

#forensics #science
OSAC's Wildlife Forensic Biology Subcommittee Develops Process Map - National Institute of Standards and Technology (.gov) Forensics
🧬 Google News: Forensic Biology 19 Sep 2025 1 min read

OSAC's Wildlife Forensic Biology Subcommittee Develops Process Map - National Institute of Standards and Technology (.gov)

OSAC's Wildlife Forensic Biology Subcommittee Develops Process Map National Institute of Standards and Technology (.gov)

#forensics #science
How an Unproven Forensic Science Became a Courtroom Staple (Published 2018) - The New York Times Forensics
🩸 Google News: Bloodstain Pattern 31 May 2018 1 min read

How an Unproven Forensic Science Became a Courtroom Staple (Published 2018) - The New York Times

How an Unproven Forensic Science Became a Courtroom Staple (Published 2018) The New York Times

#forensics #science
Traumatic paralysis following conducted electrical weapon deployment Forensics
⚖️ Journal of Forensic & Legal Medicine 27 Jul 2026 1 min read

Traumatic paralysis following conducted electrical weapon deployment

Publication date: August 2026 Source: Journal of Forensic and Legal Medicine, Volume 122 Author(s): Mark W. Kroll, Michael A. Brave, Jiri Adamec, Sebastian N. Kunz, Robert C. Bux, Howard E. Williams

#forensics #science
Fatal septic shock due to PVL-positive Staphylococcus aureus necrotizing pneumonia: autopsy findings and systematic review of the literature Forensics
⚖️ Legal Medicine 27 Jul 2026 1 min read

Fatal septic shock due to PVL-positive Staphylococcus aureus necrotizing pneumonia: autopsy findings and systematic review of the literature

Publication date: September 2026 Source: Legal Medicine, Volume 85 Author(s): Jessika Camatti, Anna Laura Santunione, Rossana Cecchi, Erjon Radheshi, Edoardo Carretto, Maria Paola Bonasoni

#forensics #science
Effects of heat-induced DNA degradation on STR and Y-STR profiling: Limitations of the degradation index Forensics
🧬 FSI: Genetics 27 Jul 2026 1 min read

Effects of heat-induced DNA degradation on STR and Y-STR profiling: Limitations of the degradation index

Publication date: January 2027 Source: Forensic Science International: Genetics, Volume 86 Author(s): Seiki Nakao, Kazuya Mori, Jun Yoshida, Misa Kitagawa, Koichi Suzuki, Takako Sato

#forensics #science
New Nanomaterial Effective for Visualizing Latent Prints Forensics
🖐️ Google News: Latent Prints 18 Sep 2024 1 min read

New Nanomaterial Effective for Visualizing Latent Prints

New Nanomaterial Effective for Visualizing Latent Prints Forensic Magazine

#forensics #science
Systems fail people: dry labbing as a distinct category of scientific fraud Forensics
🔬 Science & Justice 27 Jul 2026 1 min read

Systems fail people: dry labbing as a distinct category of scientific fraud

Publication date: Available online 25 July 2026 Source: Science & Justice Author(s): Max M. Houck

#forensics #science
When a teenager makes the 'stupid choice,' their brain is working exactly as designed Forensics
📰 Phys.org Forensics 26 Jul 2026 1 min read

When a teenager makes the 'stupid choice,' their brain is working exactly as designed

When an adult refuses to let an injustice pass—stands up to a bully or asserts their rights—we call it principle.

#forensics #science
Angola's oldest burials, including its only known ancient cremation, uncovered at a 15th-century site doomed by a dam Forensics
📰 Phys.org Forensics 26 Jul 2026 1 min read

Angola's oldest burials, including its only known ancient cremation, uncovered at a 15th-century site doomed by a dam

As the construction of a hydroelectric dam loomed, archaeologists raced to uncover Angola's earliest dated burials and its only known cremation at a 15th-century settlement before it vanished beneath the water.

#forensics #science
Compositional Changes of Hypoxic Exosomes and the Cause of Death Identification in Mechanical Asphyxia Forensics
🔬 Forensic Science and Technology 22 Dec 2024 1 min read

Compositional Changes of Hypoxic Exosomes and the Cause of Death Identification in Mechanical Asphyxia

Click the source link to read the full dispatch.

#forensics #science
Feature Matching and Recognition of Shoeprints Based on Surf Algorithm Forensics
🔬 Forensic Science and Technology 19 Dec 2024 1 min read

Feature Matching and Recognition of Shoeprints Based on Surf Algorithm

Click the source link to read the full dispatch.

#forensics #science
Unknown malware ip:port: 160.250.128.197:888 IOC Feed
📡 ThreatFox 27 Jul 2026 2 min read

Unknown malware ip:port: 160.250.128.197:888

ThreatFox reported a new active indicator of compromise (IOC) for Unknown malware. Type: ip:port. Threat Category: botnet_cc. Reporter: anonymous.

#ioc #threat-intel #threatfox #unknownmalware
Unknown malware ip:port: 160.250.128.197:22 IOC Feed
📡 ThreatFox 27 Jul 2026 2 min read

Unknown malware ip:port: 160.250.128.197:22

ThreatFox reported a new active indicator of compromise (IOC) for Unknown malware. Type: ip:port. Threat Category: botnet_cc. Reporter: anonymous.

#ioc #threat-intel #threatfox #unknownmalware
Unknown malware ip:port: 103.43.18.10:443 IOC Feed
📡 ThreatFox 27 Jul 2026 2 min read

Unknown malware ip:port: 103.43.18.10:443

ThreatFox reported a new active indicator of compromise (IOC) for Unknown malware. Type: ip:port. Threat Category: botnet_cc. Reporter: anonymous.

#ioc #threat-intel #threatfox #unknownmalware
Unknown malware ip:port: 124.223.53.112:80 IOC Feed
📡 ThreatFox 27 Jul 2026 2 min read

Unknown malware ip:port: 124.223.53.112:80

ThreatFox reported a new active indicator of compromise (IOC) for Unknown malware. Type: ip:port. Threat Category: botnet_cc. Reporter: anonymous.

#ioc #threat-intel #threatfox #unknownmalware
ClearFake domain: bxkbbt.usen-spartamax.com IOC Feed
📡 ThreatFox 27 Jul 2026 2 min read

ClearFake domain: bxkbbt.usen-spartamax.com

ThreatFox reported a new active indicator of compromise (IOC) for ClearFake. Type: domain. Threat Category: payload_delivery. Reporter: anonymous.

#ioc #threat-intel #threatfox #clearfake
ClearFake domain: usen-spartamax.com IOC Feed
📡 ThreatFox 27 Jul 2026 2 min read

ClearFake domain: usen-spartamax.com

ThreatFox reported a new active indicator of compromise (IOC) for ClearFake. Type: domain. Threat Category: payload_delivery. Reporter: threatcat_ch.

#ioc #threat-intel #threatfox #clearfake
Aisuru ip:port: 168.144.135.136:9034 IOC Feed
📡 ThreatFox 27 Jul 2026 2 min read

Aisuru ip:port: 168.144.135.136:9034

ThreatFox reported a new active indicator of compromise (IOC) for Aisuru. Type: ip:port. Threat Category: botnet_cc. Reporter: Bitsight.

#ioc #threat-intel #threatfox #aisuru
Unknown malware ip:port: 140.143.130.157:3306 IOC Feed
📡 ThreatFox 27 Jul 2026 2 min read

Unknown malware ip:port: 140.143.130.157:3306

ThreatFox reported a new active indicator of compromise (IOC) for Unknown malware. Type: ip:port. Threat Category: botnet_cc. Reporter: anonymous.

#ioc #threat-intel #threatfox #unknownmalware
CVE-2026-10724 in Various Systems CVE & Vulnerabilities
🛡️ NVD API 20 Jul 2026 2 min read

CVE-2026-10724 in Various Systems

The Reviews Feed WordPress plugin before 2.6.5 does not neutralize WordPress shortcodes contained in third-party review content before rendering it through its dynamic block, allowing unauthenticated attackers to execute arbitrary shortcodes on pages that display the feed by planting a shortcode in a review on the connected source.

#cve #nvd #medium-severity
CVE-2026-10755 in Various Systems CVE & Vulnerabilities
🛡️ NVD API 20 Jul 2026 2 min read

CVE-2026-10755 in Various Systems

The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-level privileges such as Contributors to overwrite or reset the site-wide AI integration state.

#cve #nvd #low-severity
CVE-2026-11349 in Various Systems CVE & Vulnerabilities
🛡️ NVD API 20 Jul 2026 2 min read

CVE-2026-11349 in Various Systems

The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0 do not sanitise and escape a request parameter before using it in a SQL statement, through an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection vulnerability that allows attackers to extract sensitive data from the database.

#cve #nvd #high-severity
CVE-2026-11868 in Various Systems CVE & Vulnerabilities
🛡️ NVD API 20 Jul 2026 2 min read

CVE-2026-11868 in Various Systems

The WP Travel WordPress plugin before 11.7.1 does not perform capability or ownership checks on its booking cancellation action, which is also exposed to unauthenticated users, allowing them to cancel arbitrary bookings on the site.

#cve #nvd #medium-severity
CVE-2026-12592 in Various Systems CVE & Vulnerabilities
🛡️ NVD API 20 Jul 2026 2 min read

CVE-2026-12592 in Various Systems

The SlimStat Analytics WordPress plugin before 5.5.0 does not escape a visitor-controlled geolocation value before outputting it in its admin analytics reports, allowing unauthenticated visitors to store a cross-site scripting payload that executes in the browser of an administrator who views the reports.

#cve #nvd #high-severity
CVE-2026-12723 in Various Systems CVE & Vulnerabilities
🛡️ NVD API 20 Jul 2026 2 min read

CVE-2026-12723 in Various Systems

The Kirki WordPress plugin before 6.0.12 does not perform any authorisation check on one of its REST routes, allowing unauthenticated users to overwrite the content of arbitrary existing comments and to create pre-approved comments under a spoofed identity, bypassing comment moderation.

#cve #nvd #medium-severity
CVE-2026-12724 in Various Systems CVE & Vulnerabilities
🛡️ NVD API 20 Jul 2026 2 min read

CVE-2026-12724 in Various Systems

The Kirki WordPress plugin before 6.0.12 does not sanitise or escape the email subject and body values supplied in a request before including them in the password-reset email it sends as HTML, allowing unauthenticated users to inject arbitrary HTML into the message delivered to a registered user, which can be used for phishing.

#cve #nvd #medium-severity
CVE-2026-10081 in Various Systems CVE & Vulnerabilities
🛡️ NVD API 20 Jul 2026 2 min read

CVE-2026-10081 in Various Systems

The Unlimited Elements For Elementor WordPress plugin before 2.0.11 does not sanitize or escape Google review content fetched from the Serp API before rendering it in the Google Reviews widget output, allowing unauthenticated attackers who submit a malicious review on the targeted business's Google listing to deliver Stored XSS to any visitor (including administrators) of any WP page displaying that Place ID's reviews.

#cve #nvd #high-severity
Cat’s Got Your Files: Lynx Ransomware Malware Intelligence
📝 The DFIR Report 17 Dec 2025 1 min read

Cat’s Got Your Files: Lynx Ransomware

Key Takeaways The DFIR Report Services Contact us today for pricing or a demo! The intrusion began in early March 2025 with a single successful Remote Desktop Protocol (RDP) logon to an internet-exposed system.

#malware #malware-bazaar
Memory Forensics R&D Illustrated: Detecting Hidden Windows Services Malware Intelligence
🧠 Volatility Labs 22 Mar 2023 1 min read

Memory Forensics R&D Illustrated: Detecting Hidden Windows Services

As mentioned in a recent blog post, our team is once again offering in-person training, and we have substantially updated our course for this occasion.

#malware #malware-bazaar
Flash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira Malware Intelligence
📝 The DFIR Report 05 Aug 2025 1 min read

Flash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

Overview Bumblebee malware has been an initial access tool used by threat actors since late 2021. In 2023 the malware was first reported as using SEO poisoning as a delivery mechanism.

#malware #malware-bazaar
Volatility 3 2.11.0 GitHub Releases
📦 Volatility 3 Releases 16 Jan 2025 1 min read

Volatility 3 2.11.0

New Plugins: linux.boottime linux.ebpf linux.hidden_modules linux.kthreads linux.pagecache linux.pidhashtable linux.ptrace windows.amcache windows.cmdscan windows.consoles windows.debugregisters windows.orphan_kernel_threads windows.pe_symbols windows.scheduled_tasks windows.unhoooked_system_calls Improvements to: Output formatting and filtering in the CLI Additional architecture data files for vmscan Note: Python 3.8 is now the minimum supported version of python

#github #release
Reading OneDrive Logs Part 2 GitHub Releases
🔬 Swift Forensics 04 Nov 2022 4 min read

Reading OneDrive Logs Part 2

In the last OneDrive blog post , I outlined how the ODL file format is structured. A working version of an ODL parser was also created to read these files.

#github #release
Browsing around the filesystem. GitHub Releases
🦖 Velociraptor Blog 10 Aug 2018 6 min read

Browsing around the filesystem.

The Virtual File System Like GRR, Velociraptor also maintains a virtual file system view (VFS) of the client's filesystem. GRR's VFS view is generated by adding a row for each file into the database.

#github #release
Chainsaw v2.16.3-beta.0 GitHub Releases
📦 Chainsaw Releases 26 Jul 2026 1 min read

Chainsaw v2.16.3-beta.0

This release contains the following changes of note: Bumps upstream dependencies. Fixes a bug in SRUM database parsing by updating libesedb to the latest release ( #234 ).

#github #release
GitHub, PyPI add time-based defenses against supply chain attacks GitHub Releases
🚨 BleepingComputer 26 Jul 2026 1 min read

GitHub, PyPI add time-based defenses against supply chain attacks

GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to protect against supply-chain attacks and to limit their impact. [...]

#github #release
Hayabusa v3.8.0 - Winter Release CVE & Vulnerabilities
📦 Hayabusa Releases 01 Feb 2026 2 min read

Hayabusa v3.8.0 - Winter Release

Anti-Virus False Positives Warning: You will get false positives from certain anti-virus programs like Windows Defender and Web Browsers saying they have detected malicious files.

#cve #vulnerability
Timesketch 20251219 GitHub Releases
📦 Timesketch Releases 22 Dec 2025 4 min read

Timesketch 20251219

What's Changed ✨ New Features & Major Enhancements Add a custom prompt field to the AI investigation view by @itsmvd in #3612 feat: timeline tooltip & local defaults by @jkppr in #3641 Feat: Add delete-group and help commands to tsctl by @jaegeral in #3574 Feat: High-performance streaming event export API and client support by @jkppr in #3611 feat(tsctl): Add sync-groups-from-json command for bulk user management by @jkppr in #3619 feat: tsctl analyzer-management by @jaegeral in #3636 feat: Add story section in cli-client by @jaegeral in #3599 📈 Improvements & Refinements URL handling improvements by @jeflagel in #3573 feat: add list of registered test classes in end2end tests by @jaegeral in #3594 Cleanup: Remove e2e tests for Opensearch v1 & Ubuntu 22.04 by @jkppr in #3603 feat: API client: refactor retry logic by @jaegeral in #3581 feat: decoupled the profiling configuration from the debug setting by @jaegeral in #3613 build(e2e): Optimize Dockerfile by using official Plaso base image by @jkppr in #3620 UI: Add icons to user/group autocomplete in Share dialog by @jkppr in #3621 feat: tsctl chunked for check-opensearch-links by @jaegeral in #3618 Update secgemini_log_analyzer_agent.py by @babirous in #3623 test: new e2e test for events with comments by @jaegeral in #3588 Improve LLM error handling: reduce log noise and refine frontend feedback by @jkppr in #3633 Upgrade GitHub Actions to latest versions by @salmanmkc in #3638 Upgrade GitHub Actions for Node 24 compatibility by @salmanmkc in #3637 feat: add sketch id and analysis id on multiple logging points in analyzer/interface.py by @jaegeral in #3639 docs: by @jaegeral in #3601 🐞 Bug Fixes fix: API client - ensure functions in scenario return strings by @jkppr in #3598 fix: Ensure safe default return fields for saved views by @jkppr in #3602 Fix back-to-back SecGemini investigations by @gpavlidi in #3597 api_client: fix: some smaller fixes to retry logic by @jaegeral in #3608 fix: API Client: safely retrieve _retry_count and _backoff_factor using getattr with d… by @jaegeral in #3609 Revert "fix: API Client: safely retrieve _retry_count and _backoff_factor using getattr with d…" by @jaegeral in #3610 Fix: Handle issue in events with CommentsMixin.get_with_comments() by @jaegeral in #3590 initial attempt to fix some delete workflows by @jaegeral in #3587 Fix: Remove unsupported 'features' argument in tsctl by @jaegeral in #3631 Fix: [importer] Prevent duplicate jsonl uploads by fixing ImportStreamer.close() by @jkppr in #3640 ⬆️ Dependency Updates build(deps): bump vega from 5.32.0 to 6.2.0 in /timesketch/frontend-ng in the npm_and_yarn group across 1 directory by @dependabot [bot] in #3596 build(deps): bump js-yaml from 3.14.1 to 3.14.2 in /timesketch/frontend-ng in the npm_and_yarn group across 1 directory by @dependabot [bot] in #3606 build(deps): bump js-yaml from 4.1.0 to 4.1.1 in /timesketch/frontend-v3 in the npm_and_yarn group across 1 directory by @dependabot [bot] in #3604 build(deps): bump node-forge from 1.3.1 to 1.3.2 in /timesketch/frontend-ng in the npm_and_yarn group across 1 directory by @dependabot [bot] in #3614 build(deps): bump werkzeug from 3.0.6 to 3.1.4 in the pip group across 1 directory by @dependabot [bot] in #3616 ⚠️ Ensure to update your local timesketch.conf with the new config value.

#github #release
Hayabusa v3.5.0 - Obon Release GitHub Releases
📦 Hayabusa Releases 16 Aug 2025 1 min read

Hayabusa v3.5.0 - Obon Release

3.5.0 [2025/08/16] - Obon Release Enhancements: Hayabusa now supports the base64 field modifier. ( #1677 ) ( @fukusuket ) 改善 : * base64 フィールド修飾子に対応した。 ( #1677 ) ( @fukusuket )

#github #release
Hayabusa v3.4.0 - Black Hat Arsenal USA 2025 Release GitHub Releases
📦 Hayabusa Releases 01 Aug 2025 1 min read

Hayabusa v3.4.0 - Black Hat Arsenal USA 2025 Release

3.4.0 [2025/08/01] - Black Hat Arsenal USA 2025 Release Enhancements: Field names are now abbreviated in the search command. You can disable with -b, --disable-abbreviations .

#github #release
A method to assess 'forgivable' vs 'unforgivable' vulnerabilities CVE & Vulnerabilities
🇬🇧 NCSC UK Threat Reports 28 Jan 2025 1 min read

A method to assess 'forgivable' vs 'unforgivable' vulnerabilities

Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement.

#cve #vulnerability
plaso-20240826 GitHub Releases
📦 Plaso Releases 17 Sep 2024 1 min read

plaso-20240826

Release of version 20240826

#github #release
plaso-20230717 GitHub Releases
📦 Plaso Releases 23 Jul 2023 1 min read

plaso-20230717

Release of version 20230717

#github #release
KAPE 0.8.6.1 released GitHub Releases
🪟 Eric Zimmerman's Blog 09 Aug 2019 6 min read

KAPE 0.8.6.1 released

KAPE 0.8.6.1 released Changes in this release include: - When using transfer options, transfer module output to destination when --zm true is used. This pushes the output from modules as a zip file to the destination server.

#github #release
KAPE 0.8.3.0 released GitHub Releases
🪟 Eric Zimmerman's Blog 15 Mar 2019 1 min read

KAPE 0.8.3.0 released

Get all the details here!! 0.8.3.0 info

#github #release
KAPE v0.8.2.0 released! GitHub Releases
🪟 Eric Zimmerman's Blog 05 Mar 2019 7 min read

KAPE v0.8.2.0 released!

Changes in this release include: Change ConsoleLog from being file based to memory based.

#github #release

// COMPUTER FORENSICS //

Magnet AXIOM

v10.2.0
RELEASED: June 2026

NEW FEATURES

  • Artifact Post Processing iteratives
  • Native integration with Griffeye Database
  • Decodes Apple Intelligence & ChatGPT logs

RESOLVED BUGS

  • Memory leak in APFS parsing
  • Database lock crash on nested containers

FTK Imager

v4.9.0
RELEASED: 1 June 2026

NEW FEATURES

  • Direct logical image uploads to AWS S3
  • APFS decryption using iCloud keystore keys
  • Multi-threaded SHA256 verification hash acceleration

RESOLVED BUGS

  • E01 segment spanning limit overflow
  • Paths parse crash on Linux platforms

Autopsy

vautopsy-4.23.1
RELEASED: 07 May 2026

NEW FEATURES

  • Some of the settings were not available.
  • No other changes.

RESOLVED BUGS

  • Fixes a release error with 4.23.0. That was released as a Develop build, instead of Release.

SleuthKit

vsleuthkit-4.15.0
RELEASED: 15 April 2026

NEW FEATURES

  • Added isimagesupported DLL to test file types (SKL)
  • Log large dirs that are skipped (SKL)

RESOLVED BUGS

  • Bounds checks. Reported by Mobasi
  • NTFS overflow fix from @JustinStitt

X-Ways Forensics

v21.1
RELEASED: 20 June 2026

NEW FEATURES

  • Enhanced memory extraction
  • Optimized volume snapshot analysis

RESOLVED BUGS

  • Crash on deeply nested zip files

EnCase Forensics

v24.2
RELEASED: 10 May 2026

NEW FEATURES

  • Cloud extraction connector updates
  • Advanced registry carving

RESOLVED BUGS

  • Minor memory leak during keyword searches

Belkasoft Evidence Center

v10.2
RELEASED: 29 June 2026

NEW FEATURES

  • Support for Android 15 partitions
  • Enhanced SQLite database carver

RESOLVED BUGS

  • Timezone parsing mismatch inside WeChat databases

OSForensics

v11.0
RELEASED: 12 April 2026

NEW FEATURES

  • Volume shadow copy auto-mounting
  • EseDb data indexing updates

RESOLVED BUGS

  • Crash during indexing of bad sectors

// MOBILE FORENSICS //

Cellebrite Physical Analyzer

v7.69.0
RELEASED: June 2026

NEW FEATURES

  • Android 15 full decryption support
  • WeChat dynamic database parsing
  • SQLite structure logical carving

RESOLVED BUGS

  • UTC offset calculations in chat threads
  • UI hang on importing huge memory dumps

Cellebrite UFED

v7.69.0
RELEASED: June 2026

NEW FEATURES

  • Advanced Qualcomm chipset extraction
  • MTK bypass boots support

RESOLVED BUGS

  • Connection drops during physical extractions

Oxygen Forensic Detective

v16.2
RELEASED: 15 June 2026

NEW FEATURES

  • Car key data extractor
  • Cloud backups decryption updates

RESOLVED BUGS

  • WhatsApp chat export formatting errors

Elcomsoft iOS Forensic Toolkit

v8.60
RELEASED: 18 May 2026

NEW FEATURES

  • Agent-based extraction for iOS 17
  • Keychain decryption engine updates

RESOLVED BUGS

  • Pairing errors with lock devices

MSAB XRY

v10.8
RELEASED: 25 June 2026

NEW FEATURES

  • Physical extraction for locked MTK devices
  • New Signal parser

RESOLVED BUGS

  • Minor bug in timeline presentation module

Andriller

v3.6.3
RELEASED: 30 April 2022

NEW FEATURES

  • Support for Python 3.10

RESOLVED BUGS

  • General bug fixes and code optimizations

// MEMORY FORENSICS //

Volatility 3

v2.28.0
RELEASED: 30 April 2026

NEW FEATURES

  • Some of the improvements made in this release are as follows:

RESOLVED BUGS

  • Minor stability and performance issues

Rekall

v1.7.2
RELEASED: 12 Jan 2026

NEW FEATURES

  • Offline profile caching
  • Improved kernel slide detection

RESOLVED BUGS

  • Memory map offset computation

LiME

v1.12.0
RELEASED: 31 March 2026

NEW FEATURES

  • LiME v1.12.0
  • Commits since v1.11.0 (March 23–24, 2026)**
  • Hash / digest subsystem (`hash.c`)

RESOLVED BUGS

  • Multi-page vmalloc digest corruption — only the last page was being hashed

WinPmem

v4.0.rc1
RELEASED: 12 October 2020

NEW FEATURES

  • For this release we make available the old "mini" pmem imager based on the old 1.6 branch. This imager is very simple - it can only make raw images. The AFF4 based imager may be back in the future but for now we can produce RAW images.
  • We started to distribute Winpmem releases directly from this project as it is now separated from the Rekall project (which has been discontinued).
  • The new drivers implement Fast IO mode so should be faster than before.

RESOLVED BUGS

  • Minor stability and performance issues

DumpIt

v3.1
RELEASED: 20 May 2026

NEW FEATURES

  • Secure cloud bucket streaming
  • Highly optimized RAM capture logic

RESOLVED BUGS

  • Sector alignment mismatch

Belkasoft RAM Capturer

v2.1
RELEASED: 11 May 2026

NEW FEATURES

  • Bypasses anti-dumping malware protections
  • Support for 64-bit Windows 11 kernel

RESOLVED BUGS

  • Driver installation failures

// ARTIFACT PARSERS //

Registry Explorer

v2.0
RELEASED: 10 May 2026

NEW FEATURES

  • Multi-hive transactions parser
  • Automated transaction log replay

RESOLVED BUGS

  • File path mapping locks

PECmd

v1.6
RELEASED: 14 March 2026

NEW FEATURES

  • Windows 11 prefetch version parsing
  • Batch export to CSV/JSON

RESOLVED BUGS

  • Crash on corrupted PF headers

LECmd

v1.5
RELEASED: 12 April 2026

NEW FEATURES

  • LNK target extraction enhancements
  • Detailed path resolutions log

RESOLVED BUGS

  • Path parsing on relative paths

EvtxECmd

v1.7
RELEASED: 22 June 2026

NEW FEATURES

  • Fast JSON parser mapping
  • Custom event log maps

RESOLVED BUGS

  • Timestamp timezone conversion

ShellBags Explorer

v1.4
RELEASED: 10 Jan 2026

NEW FEATURES

  • Directory hierarchy visualization
  • Registry path resolution

RESOLVED BUGS

  • Indexing errors on empty bags

AmcacheParser

v1.5
RELEASED: 20 Feb 2026

NEW FEATURES

  • Windows 11 Amcache structure support
  • Direct CSV exporting

RESOLVED BUGS

  • SHA1 computation crash

AppCompatCacheParser

v1.4
RELEASED: 22 March 2026

NEW FEATURES

  • ShimCache parser engine updates
  • JSON output options

RESOLVED BUGS

  • Index offset for Windows 10 legacy

MFTECmd

v1.6
RELEASED: 19 June 2026

NEW FEATURES

  • MFT entry carving metrics
  • ADS records mapping

RESOLVED BUGS

  • File system locked exception handles

// NETWORK FORENSICS //

Wireshark

v4.6.7
RELEASED: 16 July 2026

NEW FEATURES

  • Dynamic release parsed from news feed
  • Updates matched automatically

RESOLVED BUGS

  • Bugs identified in latest release logs

NetworkMiner

v2.9
RELEASED: 24 May 2026

NEW FEATURES

  • Automated file extraction from PCAP
  • Credential harvesting engine updates

RESOLVED BUGS

  • Minor memory leak on processing large files

Tshark

v4.6.2
RELEASED: 20 June 2026

NEW FEATURES

  • Headless network analyzer updates
  • JSON format stream exports

RESOLVED BUGS

  • Memory limits on deep nested trees

CapLoader

v1.9
RELEASED: 11 May 2026

NEW FEATURES

  • Port-independent protocol identification
  • PCAP flow analysis visualization

RESOLVED BUGS

  • Zoom coordinate scale calculation

Zeek

v8.0.9
RELEASED: 10 July 2026

NEW FEATURES

  • General system improvements and updates

RESOLVED BUGS

  • HIGH: The NVT, Rlogin, and RSH analyzers have received fixes to avoid unbounded state

Suricata

vsuricata-8.0.6
RELEASED: 07 July 2026

NEW FEATURES

  • Redmine Tracker

RESOLVED BUGS

  • General bug fixes and code optimizations

Snort

v3.12.2.0
RELEASED: 23 April 2026

NEW FEATURES

  • Libdaq v3.0.27
  • LibML v2.0.0

RESOLVED BUGS

  • Appid: add nullchecks for appidDebug and appidthreadpegs
  • Appid: fix lua detector use-after-free during reload

// MALWARE ANALYSIS //

Ghidra

vGhidra_12.1.2_build
RELEASED: 05 June 2026

NEW FEATURES

  • General system improvements and updates

RESOLVED BUGS

  • General bug fixes and code optimizations

IDA Pro

v8.4
RELEASED: 10 April 2026

NEW FEATURES

  • Cloud decompiler integrations
  • Improved C++ metadata recovery

RESOLVED BUGS

  • Debug symbols load limits

x64dbg

v2026.05.27
RELEASED: 27 May 2026

NEW FEATURES

  • 📜 Changelog
  • Added CPUStack (Linux) by @3rdit in 3839
  • Make tests declarative by @mrexodia in 3837

RESOLVED BUGS

  • May 2026: Small hotfix release
  • This is a small hotfix release after the April release. It fixes an `r8` register modification issue, a trace reader memory fault, dark theme label coloring, and support for passing an absolute path to `-cf`. It also includes a few small UI, packaging, testing, and experimental Linux debugger updates.

Cutter

v2.5.0
RELEASED: 30 June 2026

NEW FEATURES

  • New Preferences tab to query and modify Rizin configuration variables (evars) directly from the UI

RESOLVED BUGS

  • Register, variable, and memory value tooltips while debugging or emulating, including sub-register values and previews of values inside brackets
  • Debugging improvements:

PE-bear

v0.7.2
RELEASED: 05 June 2026

NEW FEATURES

  • Removed hard-coded limit of the displayed resources (only 50 were visible)
  • Added Japanese language

RESOLVED BUGS

  • GUI behavior on Windows 11 (i.e. invisible selection in hex editor and disasm view), fixed editing content in hex editor
  • Crashing on fast editing content in hex edit

Process Hacker

v3.2.25011.2103
RELEASED: 14 May 2025

NEW FEATURES

  • New Name, Icons, UI by @winsiderss
  • New ARM64 support by @jxy-s

RESOLVED BUGS

  • General bug fixes and code optimizations

YARA

v4.5.5
RELEASED: 30 October 2025

NEW FEATURES

  • Implement the `--no-follow-symlinks` option in Windows (6e11b5a).

RESOLVED BUGS

  • Revert YRRESCAN_LIMIT back to 4096 (2177).
  • Infinite loop while parsing corrupt resource directory in PE module (2162).

CyberChef

v11.3.0
RELEASED: 24 July 2026

NEW FEATURES

  • General system improvements and updates

RESOLVED BUGS

  • General bug fixes and code optimizations

Floss

v3.1.1
RELEASED: 26 September 2024

NEW FEATURES

  • General system improvements and updates

RESOLVED BUGS

  • General bug fixes and code optimizations

oledump

v0.0.85
RELEASED: 17 March 2026

NEW FEATURES

  • XML macros scanning filters
  • Improved stream decoders

RESOLVED BUGS

  • Newline formatting in plugins output

// OSINT & EMAIL //

OSINT-Profiler

v1.0
RELEASED: 30 April 2026

NEW FEATURES

  • Dynamic GitHub release updates
  • General improvements

RESOLVED BUGS

  • General bug fixes and code optimizations

File_Integrity_Verifier_FIV

v1.0
RELEASED: 26 November 2025

NEW FEATURES

  • 🎉 First official release of File Integrity Verifier (FIV)
  • Full GUI with Light/Dark mode

RESOLVED BUGS

  • General bug fixes and code optimizations

Spiderfoot

v4.0
RELEASED: 07 April 2022

NEW FEATURES

  • General system improvements and updates

RESOLVED BUGS

  • General bug fixes and code optimizations

Maltego

v4.6.0
RELEASED: 12 April 2026

NEW FEATURES

  • Collaborative graphics dashboard
  • Real-time transforms indexing

RESOLVED BUGS

  • Memory crash on 50k+ nodes

Sherlock

v0.16.0
RELEASED: 16 September 2025

NEW FEATURES

  • Most users should see a significant reduction in false positives (on an ongoing basis) after updating to this release. Nothing is ever perfect (regional differences, etc), but noise should be reduced by a notable margin.
  • 📦 Community package now available on [Debian][ext-debian] @Nilsonfsilva

RESOLVED BUGS

  • General bug fixes and code optimizations

Holehe

v2.0.2
RELEASED: 11 May 2026

NEW FEATURES

  • Added new portals checks
  • Socks5 proxies support

RESOLVED BUGS

  • Credential test timeout errors

// TIMELINE & DECRYPTION //

Plaso

v20260512
RELEASED: 12 May 2026

NEW FEATURES

  • Release of version 20260512

RESOLVED BUGS

  • General bug fixes and code optimizations

Arsenal Image Mounter

v3.11
RELEASED: 19 June 2026

NEW FEATURES

  • Write-block mounts for APFS
  • Virtual machine boot options

RESOLVED BUGS

  • Disk mapping lock exceptions

Passware Kit Forensic

v2026.2.0
RELEASED: 20 May 2026

NEW FEATURES

  • APFS T2 chip decryption support
  • Fast RAM password harvesting

RESOLVED BUGS

  • GPU utilization metrics dashboard

Hashcat

v7.1.2
RELEASED: 23 August 2025

NEW FEATURES

  • General system improvements and updates

RESOLVED BUGS

  • This hotfix restores backward compatibility in machine-readable status view mode, which was broken in v7.1.0 and affected third-party overlays such as the Hashtopolis agent. It also fixes issues in the Argon2 libraries when used in multi-hash modes. If you are using hashcat v7.1.0+ with LUKS2 or KeePass KDBX4, updating is strongly recommended.

Velociraptor

v0.77.1
RELEASED: 23 June 2026

NEW FEATURES

  • General system improvements and updates

RESOLVED BUGS

  • If you find any issues please file an issue on GitHub or chat with us on our discord server.

Hayabusa

v3.10.0
RELEASED: 04 July 2026

NEW FEATURES

  • Anti-Virus False Positives

RESOLVED BUGS

  • Minor stability and performance issues

ARCHIVE INTELLIGENCE OVERVIEW

328
Forensics
135
IOC Feed
233
DFIR
62
Malware
182
CVEs
59
GitHub
1
Research
> TOTAL ARTICLES: 1000
> DAYS COLLECTED: 12
> CATEGORIES TRACKED: 7
> AVG DAILY VOLUME: 83.3 articles
> MOST ACTIVE TOPIC: FORENSICS (328)
> ARCHIVE SPAN: 15 Jul 2026 - 27 Jul 2026
1000 TOTAL

// EXPLORER DIRECTORY //

📁 Jul 2026 [1000 ARTICLES]