






Rule Name & Severity | Last Updated | Author | Types, Tactics & Capabilities | |
|---|---|---|---|---|
Attachment: Password-protected PDF with fake document indicators | 2d ago Jan 21st, 2026 | Sublime Security | /feeds/core/detection-rules/attachment-password-protected-pdf-with-fake-document-indicators-b45e4440 | |
Link: Excessive URL rewrite encoders | 2d ago Jan 21st, 2026 | Sublime Security | /feeds/core/detection-rules/link-excessive-url-rewrite-encoders-b88e53a7 | |
Link to Google Apps Script macro via comment tagging | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/link-to-google-apps-script-macro-via-comment-tagging-66fecd30 | |
Suspicious Links to Cloudflare R2 and Edge Services | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/suspicious-links-to-cloudflare-r2-and-edge-services-5dd3e5c8 | |
Open redirect: tkqlhce.com | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-tkqlhcecom-44eef073 | |
Brand impersonation: Sharepoint fake file share | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/brand-impersonation-sharepoint-fake-file-share-ff8b296b | |
Open redirect: Medium | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-medium-18c6aa1b | |
Open redirect: Nested Doubleclick.net | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-nested-doubleclicknet-bbed5cc6 | |
Open redirect: obunsha.co.jp | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-obunshacojp-e972dacf | |
Open redirect: Panera Bread | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-panera-bread-91a726a2 | |
Open redirect: phoenixartstudio.net | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-phoenixartstudionet-7b83c3ab | |
Open redirect: PremierBet | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-premierbet-0ad17224 | |
Open redirect: qrxtech.com | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-qrxtechcom-b790552a | |
Open redirect: radiopublic.com | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-radiopubliccom-2cb3f7a0 | |
Open redirect: retailrocket.net | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-retailrocketnet-0e00e7cb | |
Open redirect: ringaraja.net | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-ringarajanet-4d9594f4 | |
Open redirect: sciencebuddies.org | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-sciencebuddiesorg-019317d4 | |
Open redirect: secondstreetapp.com | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-secondstreetappcom-6767888d | |
Open redirect: shoppermeet.net | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-shoppermeetnet-fe105c91 | |
Open redirect: Slack | 11d ago Jan 12th, 2026 | Sublime Security | /feeds/core/detection-rules/open-redirect-slack-1b15f4a3 |