DEV Community

Cover image for The Ultimate Cybersecurity Dataset List Was Dead Since 2021. So We Resurrected It for 2026.
jordanricky1604-ship-it
jordanricky1604-ship-it

Posted on

The Ultimate Cybersecurity Dataset List Was Dead Since 2021. So We Resurrected It for 2026.

If you work in cybersecurity research, threat hunting, or machine learning, you've almost certainly used the famous Awesome-Cybersecurity-Datasets repository.

For years, it was the gold standard directory for finding network traffic PCAPs, malware binaries, and fraud data to train intrusion detection models.

But there was a massive problem: The original repository was abandoned in 2021.

If you tried to build a threat detection model today using the original list, you would be training on the 1999 KDD Cup (which is universally considered obsolete), the Alexa Top 1 Million (which hasn't existed since 2022), and Yahoo password frequency data from 2011.

The threat landscape has fundamentally changed. So we decided to fix it.

The Authoritative 2026 Fork

We have completely overhauled, purged, and modernized the list to create the new authoritative standard for 2026.

We stripped out the dead weight and injected the critical datasets required for modern threat research:

1. Modern Malware Benchmarks & The Malware Families Catalog

We removed the outdated 2015 Kaggle malware datasets and replaced them with the modern SOREL-20M dataset and our own Malware Families Catalog. The catalog contains over 2,899 specific, modern malware families (like Pikabot, AgentTesla, and LockBit) fully mapped to MITRE ATT&CK tactics for modern EDR engineering.

2. Generative AI & LLM Security

In 2021, LLM security wasn't even on the radar. Today, it's critical. We've added a dedicated section tracking state-of-the-art datasets like the JailbreakBench and the massive Jailbreak_LLMs prompt injection databases.

3. Cloud, Container, and Supply Chain Security

We added the Backstabber's Knife Collection (tracking malicious open-source supply chain attacks on NPM/PyPI) and the Mordor project (which provides pre-recorded, high-quality JSON security events generated by simulated adversarial techniques in AWS/Azure).

4. Modern Web App Firewalls (WAF)

We stripped out the 16-year-old synthetic HTTP CSIC 2010 datasets and replaced them with the OpenAppSec WAF Comparison Dataset—millions of requests and tens of thousands of malicious payloads explicitly designed to test modern WAF evasion techniques.

Explore the New List

We didn't just update the Markdown file; we built a fully interactive, searchable frontend for it.

🌐 View the Interactive Searchable Catalog Here

💻 Star the Repository & Contribute on GitHub

If you are a researcher, student, or engineer building the next generation of threat detection tooling, bookmark the new fork. If you have a modern dataset that the community needs to know about, submit a PR! We are actively reviewing and merging new datasets weekly.

Top comments (0)