Indicators of Compromise

SANS ISC 📡 RSS May 28

ISC Stormcast For Thursday, May 28th, 2026 https://isc.sans.edu/podcastdetail/9948, (Thu, May 28th)

SANS ISC →

SC Media 📡 RSS May 27

High-severity Starlette vulnerability 'BadHost' could expose sensitive data

CVEs: CVE-2026-48710

SC Media →

CSO Online 📡 RSS May 27

FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework

CVEs: CVE-2026-48710

CSO Online →

GBHackers 📡 RSS May 27

BadHost Vulnerability Exposes Sensitive AI Agent Server Endpoints to Attackers

CVEs: CVE-2026-48710

GBHackers →

CISA Advisories 📡 RSS May 27

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2026-8398 CVE-2026-45321 CVE-2026-48027

CISA Advisories →

GBHackers 📡 RSS May 27

CISA Warns LiteSpeed cPanel Plugin Vulnerability Is Being Exploited in Attacks

CVEs: CVE-2026-48172

GBHackers →

GBHackers 📡 RSS May 27

Windows Kernel Vulnerability Lets Attackers Modify Kernel Memory Counters

CVEs: CVE-2026-40369

GBHackers →

The Hacker News 📡 RSS May 27

Gitea Vulnerability Exposes Private Container Images without Authentication

CVEs: CVE-2026-27771

The Hacker News →

Security Affairs 📡 RSS May 27

Microsoft SharePoint Has a New RCE Flaw. If You Haven’t Patched Yet, Go Do That.

CVEs: CVE-2026-45659

Security Affairs →

GBHackers 📡 RSS May 27

Microsoft SharePoint Server Flaw Enables Remote Code Execution Attacks

CVEs: CVE-2026-45659

GBHackers →

SANS ISC 📡 RSS May 27

ISC Stormcast For Wednesday, May 27th, 2026 https://isc.sans.edu/podcastdetail/9946, (Wed, May 27th)

SANS ISC →

Exploit Database 📡 RSS May 27

[webapps] OpenCATS 0.9.7.4 - SQL Injection

IPs: 0.9.7.4

Exploit Database →

SC Media 📡 RSS May 26

Drupal bug added to CISA list of known exploited vulnerabilities

CVEs: CVE-2026-9082

SC Media →

AWS Security Blog 📡 RSS May 26

Well-architected best practices for software supply chain security

Domains: tea.xyz

AWS Security Blog →

SC Media 📡 RSS May 26

Critical vulnerability in Universal Robots' PolyScope OS allows remote command execution

CVEs: CVE-2026-8153

SC Media →

SC Media 📡 RSS May 26

Zero-day vulnerability in Japanese LMS exploited to deploy Cobalt Strike

CVEs: CVE-2026-5426

Domains: asp.net

SC Media →

SC Media 📡 RSS May 26

Zero-click attack hijacks WhatsApp accounts on iOS 16

CVEs: CVE-2025-43300 CVE-2025-55177

SC Media →

SC Media 📡 RSS May 26

Ghost CMS vulnerability exploited in large-scale campaign

CVEs: CVE-2026-26980

SC Media →

Help Net Security 📡 RSS May 26

Actively exploited Trend Micro Apex One flaw gets CISA warning (CVE-2026-34926)

CVEs: CVE-2026-34926

Help Net Security →

CISA Advisories 📡 RSS May 26

ABB LVS MConfig

IPs: 1.4.9.21

CISA Advisories →