Indicators of Compromise

SANS ISC 📡 RSS Aug 27

ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)

SANS ISC →

SC Media 📡 RSS Aug 26

Ubiquiti patches 3 critical remote code execution vulnerabilities

CVEs: CVE-2026-77537 CVE-2026-77550 CVE-2026-77554

SC Media →

SC Media 📡 RSS Aug 26

Nvidia NemoClaw vulnerability allows full control of AI agent's local model server

CVEs: CVE-2026-65105

SC Media →

SC Media 📡 RSS Aug 26

Apple reverses Hide My Email domain change after user backlash

Domains: private.icloud.com

SC Media →

GBHackers 📡 RSS Aug 26

Critical WatchGuard Agent Flaws Let Unauthenticated Attackers Execute Remote Code

CVEs: CVE-2026-57910 CVE-2026-57909

GBHackers →

GBHackers 📡 RSS Aug 26

SonicWall NetExtender Flaw Lets Attackers Write Arbitrary Files as Root

CVEs: CVE-2026-66152

GBHackers →

CISA Advisories 📡 RSS Aug 26

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2015-3246 CVE-2015-5287 CVE-2019-1068 CVE-2021-23758 CVE-2022-0995

Domains: ajax.net

CISA Advisories →

The Hacker News 📡 RSS Aug 26

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

CVEs: CVE-2026-19913 CVE-2026-19912

The Hacker News →

Help Net Security 📡 RSS Aug 26

Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)

CVEs: CVE-2026-60004

Help Net Security →

GBHackers 📡 RSS Aug 26

Critical WordPress TranslatePress Flaw Lets Attackers Take Over Admin Accounts

CVEs: CVE-2026-19632

GBHackers →

GBHackers 📡 RSS Aug 26

NVIDIA NemoClaw Vulnerability Lets Attackers Hijack AI Agents via DNS Rebinding

CVEs: CVE-2026-65105

GBHackers →

GBHackers 📡 RSS Aug 26

Microsoft SharePoint Flaws Let Unauthenticated Attackers Execute Remote Code

CVEs: CVE-2026-55040 CVE-2026-63520

GBHackers →

Security Affairs 📡 RSS Aug 26

U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-60004

Security Affairs →

The Hacker News 📡 RSS Aug 26

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

CVEs: CVE-2026-60004

The Hacker News →

SecurityWeek 📡 RSS Aug 26

CISA Warns of Exploited Gitea Vulnerability

CVEs: CVE-2026-60004

SecurityWeek →

SANS ISC 📡 RSS Aug 26

ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, (Wed, Aug 26th)

SANS ISC →

Security Affairs 📡 RSS Aug 25

Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable

CVEs: CVE-2026-61979 CVE-2026-15981

Security Affairs →

SANS ISC 📡 RSS Aug 25

Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)

IPs: 169.254.169.254

SANS ISC →

SecurityWeek 📡 RSS Aug 25

WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities

CVEs: CVE-2026-61979 CVE-2026-15981

SecurityWeek →

SC Media 📡 RSS Aug 25

Unpatched Calix router vulnerability allows remote attackers to expose home networks

CVEs: CVE-2026-75501

SC Media →