NewsPublished 19 May 2026

VoidAccess v1.3, what changed since launch

Source Reddit ThreatIntel

Discussion

VoidAccess v1.3 is an updated version of a threat intelligence tool that enhances capabilities such as certificate transparency subdomain enumeration, infrastructure cluster detection, sandbox analysis integration, false-positive suppression, and expanded data scraping from various sources. It introduces IOC freshness decay to reduce chasing outdated indicators. This update is informational about tool improvements rather than a direct security vulnerability or exploit. No known exploits or vulnerabilities are reported in this release.

r/ThreatIntelligence+threatintel+websecurityresearch (opens in a new tab)u/LockInternational8930 points0 comments

This post was deleted. Content shown was captured before removal.

shipped v1.0 a few weeks ago, significant update since then. biggest additions: certificate transparency subdomain enumeration via crt.sh, infrastructure cluster detection showing shared IPs and nameservers, Hybrid Analysis sandbox for hashes, GreyNoise suppression killing false-positive scanner IPs, paste site scraping, GitHub and GitLab scraping, 20 security RSS feeds. also added IOC freshness decay, IPs stale after 14 days, domains after 30, hashes never expire. analysts stop chasing old C2s.

https://github.com/KatrielMoses/voidaccess

Links cited in the discussion

https://github.com/KatrielMoses/voidaccess

Impact

There is no direct security impact or vulnerability associated with this update. The tool is designed to assist analysts in threat intelligence gathering and does not introduce new attack vectors or exploits. No known exploits in the wild are reported related to this tool or its update.

Defensive guidance

No mitigation is required as this is an informational update about a threat intelligence tool. Analysts and users should review the update to understand new features but no security remediation actions are necessary.

Summary

VoidAccess v1.3 is a threat intelligence tool update that adds features including subdomain enumeration via crt.sh, detection of shared IPs and nameservers, integration with Hybrid Analysis sandbox for hash analysis, suppression of false-positive scanner IPs using GreyNoise data, scraping of paste sites, GitHub, GitLab, and multiple security RSS feeds. It also implements indicator of compromise (IOC) freshness decay policies to improve analyst efficiency by marking IPs and domains as stale after set periods. The update is a functional enhancement and does not represent a security threat or vulnerability itself.

References

Community reviews

Loading reviews…

Discussion

Links cited in the discussion

AI analysisMachine-generated, updated 24 May 2026, 18:56 UTC

Technical details

References

Community reviews

Related threats