Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

BraZetsu is a Python-based Windows malware framework used by the Brazilian threat actor Exilware. It acts as a toolkit for Initial Access Brokers, turning compromised systems into commercial assets. The malware targets corporate, financial, industrial, and law enforcement sectors in Iberia and Latin America. It harvests financial transaction files in Brazilian CNAB format, browsing histories, and digital certificates. BraZetsu supports the 'Infected Marketplace' where initial access is sold to criminal clients for further exploitation. It has evolved rapidly since early 2026, incorporating AI-enhanced reconnaissance and advanced evasion techniques.

BraZetsu is a modular, Python-based malware framework attributed to the Brazilian threat actor Exilware, designed for Windows environments. Unlike typical information stealers, it functions as a comprehensive toolkit for Initial Access Brokers, enabling the commercialization of compromised systems. It targets multiple sectors including corporate, financial, industrial, and law enforcement entities primarily in Iberia and Latin America. The malware specifically collects financial transaction files formatted in the Brazilian CNAB standard, detailed browsing histories, and digital certificates. BraZetsu facilitates the 'Infected Marketplace,' a platform where initial access to infected systems is sold to criminal clients who can then deploy additional malicious payloads remotely. Since February 2026, BraZetsu has undergone rapid technical evolution, advancing from basic remote access capabilities to an AI-enhanced intelligence collection platform with sophisticated evasion techniques.

BraZetsu is a Python-based Windows malware framework used by the Brazilian threat actor Exilware. It acts as a toolkit for Initial Access Brokers, turning compromised systems into commercial assets. The malware targets corporate, financial, industrial, and law enforcement sectors in Iberia and Latin

Anatomy of BraZetsu: How Cybercriminals Supply the Underground Ecosystem

Threats Tagged 'ai-enhanced reconnaissance'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ai-enhanced reconnaissance'

Lead Pen Test Professional