Morphisec Labs

https://www.morphisec.com/blog/

Israeli endpoint-security vendor; in-the-wild malware analysis (added 2026-05-08). 2026-05-08 audit: WebFetch returned 5 dated articles Apr 23 - May 7 2026. Candidate; promote to active after 3 runs. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → webfetch https://www.morphisec.com/blog/ (listing) then webfetch the per-article URL for body; RSS available at https://www.morphisec.com/rss-feeds/. AVOID: Listing carries marketing/webinar posts interleaved with research, filter to the threat-research/malware-analysis titles. No bridge needed; plain WebFetch works.. | 2026-07-05 admiralty audit: C; originates first-hand malware analysis but recent output is marketing-dominated with inconsistent research cadence; reliability MEDIUM->C. Live, status stays active; filter to malware-analysis titles. | 2026-10-18 (S1): `extract` of the listing returns titles without dates; `url --direct` raw HTML is the working listing recipe. | 2026-11-01 (2026-11-01T1312Z-audit): G1 recipe: `extract https://www.morphisec.com/blog/` returns dated rows without titles and `url --direct` returns the post hrefs; `extract <post>` carries the date. Its 2026-10-28 PHP2Shell Windows/IIS post was on the listing and no fire read it.