1 / 4
Illustrative intelligence examples

How an attack primitive can be organized.

These static examples illustrate categories, source labels, scores and replay variants. They are not a live feed or measured customer results.

Example attack primitive explorer

Six illustrative primitives.

Titles, scores and variant counts below are illustrative. Review repository-specific evidence in the workspace.

Static demonstration
01
Authentication · BleepingComputerSession-boundary bypass variant reproduced

Node and edge-auth stacks · 6 variants

98
02
Cloud · The Hacker NewsRedirect-assisted metadata SSRF

Three frameworks, replay available · 4 variants

84
03
Supply chain · OSV.devPackage behavior changed after ownership transfer

Two dependencies away · 9 variants

71
04
AI agents · Google Project ZeroTool-permission boundary escape

Agentic runtimes and tool routers · 3 variants

67
05
Authentication · CISA AdvisoriesDevice-code replay reaches an admin handoff

OAuth and SSO middleware · 5 variants

63
06
Containers · Unit 42Build cache restores an untrusted layer

CI runners and image promotion · 7 variants

58
The source layer

Two hundred feeds. One useful signal.

Cefense does not turn 254 feeds into 254 inboxes. It reconstructs attacker behavior, groups duplicates, and surfaces a primitive only when it changes your risk.

01CISA Advisories

02NIST NVD

03CVE.org

04MITRE ATT&CK

05FIRST EPSS

06BleepingComputer

07The Hacker News

08Krebs on Security

09Dark Reading

10SecurityWeek

11The Record

12PortSwigger Daily Swig

13Google Project Zero

14Unit 42

15The DFIR Report

16Mandiant

17Microsoft Security

18Google Security Blog

19Cisco Talos

20CrowdStrike

21SentinelOne Labs

22Elastic Security Labs

23VirusTotal

24AlienVault OTX

25GreyNoise

26Shodan

27Censys

28URLhaus

29ThreatFox

30Malpedia

31Exploit DB

32Zero Day Initiative

33Packet Storm

34Hybrid Analysis

35ANY.RUN

36Joe Sandbox

37AbuseIPDB

38Spamhaus

39Cloudflare Radar

40Shadowserver

+ more research, malware, infrastructure, cloud, identity, OT, and OSINT sources