Indicators of Compromise

The Hacker News 📡 RSS Jul 21

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

CVEs: CVE-2026-50522

The Hacker News →

The Hacker News 📡 RSS Jul 21

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

CVEs: CVE-2026-0257

The Hacker News →

SANS ISC 📡 RSS Jul 21

Captive Portal Detection, (Tue, Jul 21st)

SANS ISC →

CISA Advisories 📡 RSS Jul 21

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2021-27137 CVE-2026-0770 CVE-2026-63030 CVE-2026-60137

CISA Advisories →

CISA Advisories 📡 RSS Jul 21

Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW

Domains: security.paloaltonetworks.com

CISA Advisories →

CISA Advisories 📡 RSS Jul 21

Rockwell Automation Studio 5000 Logix Designer

CVEs: CVE-2026-9108 CVE-2026-9127 CVE-2026-9128

CISA Advisories →

The Hacker News 📡 RSS Jul 21

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

CVEs: CVE-2026-63030 CVE-2026-60137

The Hacker News →

The Hacker News 📡 RSS Jul 21

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

CVEs: CVE-2026-6875

The Hacker News →

Security Affairs 📡 RSS Jul 21

Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875

CVEs: CVE-2026-6875

Security Affairs →

Zero Day Initiative 📡 RSS Jul 21

ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

CVEs: CVE-2026-50297

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 21

ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

CVEs: CVE-2026-50325

Zero Day Initiative →

SANS ISC 📡 RSS Jul 21

ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st)

SANS ISC →

CSO Online 📡 RSS Jul 20

ServiceNow’s sandbox escape RCE hole now exploited in the wild

CVEs: CVE-2026-6875

CSO Online →

SANS ISC 📡 RSS Jul 20

WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th)

CVEs: CVE-2026-63030

SANS ISC →

Tenable Blog 📡 RSS Jul 20

wp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Core

CVEs: CVE-2026-63030 CVE-2026-60137

Tenable Blog →

The Hacker News 📡 RSS Jul 20

New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

CVEs: CVE-2026-14266

The Hacker News →

SANS ISC 📡 RSS Jul 20

ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th)

SANS ISC →

The Hacker News 📡 RSS Jul 19

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

CVEs: CVE-2026-42533

IPs: 37.0.3.1

The Hacker News →

Wordfence Blog 📡 RSS Jul 17

PSA: WordPress Core Patched Unauthenticated Remote Code Execution Vulnerability Chain

CVEs: CVE-2026-60137 CVE-2026-63030

Wordfence Blog →

Rapid7 Blog 📡 RSS Jul 17

CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core

CVEs: CVE-2026-63030

Rapid7 Blog →