Indicators of Compromise

CSO Online 📡 RSS Sep 24

Check Point hacked: The security software protecting your network has become a prime attack target

CVEs: CVE-2026-85102

CSO Online →

SC Media 📡 RSS Sep 23

D-Link warns of critical vulnerabilities in legacy DIR-822A routers with public exploit code

CVEs: CVE-2026-86296

SC Media →

BleepingComputer 📡 RSS Sep 23

Placeholder domain used in dev docs now serves ClickFix attacks

Domains: third-party.com

BleepingComputer →

SC Media 📡 RSS Sep 23

ZTE SmartLife platform vulnerabilities allow account takeover

CVEs: CVE-2026-86553

SC Media →

Security Affairs 📡 RSS Sep 23

U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-85102

Security Affairs →

BleepingComputer 📡 RSS Sep 23

Check Point warns of hackers exploiting Security Gateway VPN RCE flaw

CVEs: CVE-2026-85102

BleepingComputer →

BleepingComputer 📡 RSS Sep 23

Hackers start exploiting critical WordPress flaw for code execution

CVEs: CVE-2026-87902

BleepingComputer →

Security Affairs 📡 RSS Sep 23

F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks

CVEs: CVE-2026-94127

Security Affairs →

The Hacker News 📡 RSS Sep 23

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

CVEs: CVE-2026-67279 CVE-2026-86060

The Hacker News →

Qualys Blog 📡 RSS Sep 23

CISA BOD 26-04 Timelines for Three Linux Kernel CVEs

CVEs: CVE-2025-39682 CVE-2026-53266 CVE-2025-39964

Qualys Blog →

GBHackers 📡 RSS Sep 23

HPE Networking Analytics Engine Flaws Let Attackers Gain Root Access

CVEs: CVE-2026-76708 CVE-2026-76709

GBHackers →

GBHackers 📡 RSS Sep 23

SolarWinds Observability Flaws Let Unauthenticated Attackers Execute Remote Code

CVEs: CVE-2026-28324 CVE-2026-28325

GBHackers →

The Hacker News 📡 RSS Sep 23

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

CVEs: CVE-2026-80521

The Hacker News →

Help Net Security 📡 RSS Sep 23

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances

CVEs: CVE-2026-93616 CVE-2026-85102

Help Net Security →

GBHackers 📡 RSS Sep 23

ManageEngine RCE Flaw Enables SYSTEM Code Execution From Windows Login Screen

CVEs: CVE-2026-74849

GBHackers →

GBHackers 📡 RSS Sep 23

Critical WordPress Flaw Lets Unauthenticated Attackers Execute Remote Code

CVEs: CVE-2026-87902

GBHackers →

Help Net Security 📡 RSS Sep 23

WordPress 7.1.2 fixes critical unauthenticated path traversal vulnerability (CVE-2026-87902)

CVEs: CVE-2026-87902

Help Net Security →

GBHackers 📡 RSS Sep 23

Microsoft SharePoint Flaw Lets Low-Privilege Attackers Execute Remote Code

CVEs: CVE-2026-65660

GBHackers →

Rapid7 Blog 📡 RSS Sep 23

CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM

CVEs: CVE-2026-94127

Rapid7 Blog →

The Hacker News 📡 RSS Sep 23

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

CVEs: CVE-2026-94127

The Hacker News →