Indicators of Compromise

Security Affairs 📡 RSS Sep 22

U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-7273

Security Affairs →

GBHackers 📡 RSS Sep 22

D-Link DIR-822A Router Vulnerability Scores CVSS 10.0 With Public PoC Available

CVEs: CVE-2026-86296

GBHackers →

GBHackers 📡 RSS Sep 22

CISA Flags Actively Exploited Flaw in Zyxel GS1900 Switches

CVEs: CVE-2026-7273

GBHackers →

GBHackers 📡 RSS Sep 22

Hackers Exploit WordPress CVE-2026-63030 and CVE-2026-60137 to Steal Government Data

CVEs: CVE-2026-63030 CVE-2026-60137

GBHackers →

The Hacker News 📡 RSS Sep 22

WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session

CVEs: CVE-2026-93485

The Hacker News →

The Hacker News 📡 RSS Sep 22

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

CVEs: CVE-2026-7273

The Hacker News →

Zero Day Initiative 📡 RSS Sep 22

ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-20350

Zero Day Initiative →

SANS ISC 📡 RSS Sep 22

ISC Stormcast For Tuesday, September 22nd, 2026 https://isc.sans.edu/podcastdetail/10104, (Tue, Sep 22nd)

SANS ISC →

Help Net Security 📡 RSS Sep 21

North Korea’s job interview scam runs both ways

Domains: crates.io

Help Net Security →

CISA Advisories 📡 RSS Sep 21

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2026-7273

CISA Advisories →

Google Project Zero 📡 RSS Sep 21

Windows Exploitation Techniques: Dangling COM Object Registrations

CVEs: CVE-2026-66804 CVE-2026-50343

Google Project Zero →

SANS ISC 📡 RSS Sep 21

ISC Stormcast For Monday, September 21st, 2026 https://isc.sans.edu/podcastdetail/10102, (Mon, Sep 21st)

SANS ISC →

GBHackers 📡 RSS Sep 21

Hackers Abuse Critical cPanel Authentication Bypass to Compromise Hosting Servers

CVEs: CVE-2026-41940

GBHackers →

The Hacker News 📡 RSS Sep 19

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

CVEs: CVE-2026-28326

The Hacker News →

The Hacker News 📡 RSS Sep 19

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

CVEs: CVE-2026-58138

The Hacker News →

The Hacker News 📡 RSS Sep 19

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

CVEs: CVE-2025-39682

The Hacker News →

The Hacker News 📡 RSS Sep 18

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

Domains: wordpress.org

The Hacker News →

The Hacker News 📡 RSS Sep 18

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

CVEs: CVE-2026-85889

The Hacker News →

CISA Advisories 📡 RSS Sep 18

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2025-39964 CVE-2026-53266

CISA Advisories →

CISA Advisories 📡 RSS Sep 18

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2025-39682

CISA Advisories →