Wordfence Finds Critical Backdoor in ARVE WordPress Plugin
Domains:
wordpress.org
Indicators of Compromise
417 articles containing extracted IOCs (CVEs, IPs, hashes, domains, URLs, emails)
Keycloak Flaw Exposes Users’ Personal Data to Restricted Admins
CVEs:
CVE-2026-17059
Critical JetBrains TeamCity Flaw Enables Unauthenticated Remote Code Execution
CVEs:
CVE-2026-63077
JetBrains says a crafted HTTP request could break TeamCity
CVEs:
CVE-2026-63077
Critical SolarWinds Web Help Desk Flaw Lets Attackers Bypass SAML Authentication
CVEs:
CVE-2026-28323
Recon-Only SSH Attack Leaves No Malware but Signals a Second-Stage Intrusion
IPs:
91.92.40.13
PHP Patches 3 Security Flaws Enabling SQL Injection, Memory Corruption and DoS Attacks
IPs:
8.4.248.4
Critical Code Execution Vulnerability Patched in TeamCity
CVEs:
CVE-2026-63077
ISC Stormcast For Friday, July 31st, 2026 https://isc.sans.edu/podcastdetail/10032, (Fri, Jul 31st)
Researchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police App
Domains:
hunt.io
KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails
CVEs:
CVE-2026-66066
Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)
CVEs:
CVE-2026-42897
Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge
CVEs:
CVE-2026-59726
NASA Core Flight System (cFS) Health & Safety (HS) Application
CVEs:
CVE-2026-18064
Schneider Electric IGSS
Domains:
igss.schneider-electric.com
MikroTik RouterOS
CVEs:
CVE-2026-14227
Toptech Systems RCU II+ and Multiload II+
CVEs:
CVE-2026-12562
Watchfire Controller Software
CVEs:
CVE-2026-5846
Johnson Controls OpenBlue Employee
CVEs:
CVE-2026-21662
CVE-2026-34495
CVE-2026-34497
MZ Automation GmbH libiec61850
CVEs:
CVE-2026-66720
CVE-2026-66369
CVE-2026-63550
CVE-2026-65421
CVE-2026-66364
CVE-2026-66349
CVE-2026-56758
CVE-2026-66360