Indicators of Compromise

Zero Day Initiative 📡 RSS Aug 11

ZDI-26-550: OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability

CVEs: CVE-2026-18291

Zero Day Initiative →

Zero Day Initiative 📡 RSS Aug 11

ZDI-26-549: OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-18290

Zero Day Initiative →

Zero Day Initiative 📡 RSS Aug 11

ZDI-26-548: OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-18289

Zero Day Initiative →

Zero Day Initiative 📡 RSS Aug 11

ZDI-26-547: OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-18288

Zero Day Initiative →

Zero Day Initiative 📡 RSS Aug 11

ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-69264

Zero Day Initiative →

Zero Day Initiative 📡 RSS Aug 11

ZDI-26-545: Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-69256

Zero Day Initiative →

Zero Day Initiative 📡 RSS Aug 11

ZDI-26-544: Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability

CVEs: CVE-2026-62893

Zero Day Initiative →

Zero Day Initiative 📡 RSS Aug 11

ZDI-26-543: Microsoft Windows ICC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-54984

Zero Day Initiative →

Zero Day Initiative 📡 RSS Aug 11

ZDI-26-542: Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability

CVEs: CVE-2026-62712

Zero Day Initiative →

SANS ISC 📡 RSS Aug 11

ISC Stormcast For Tuesday, August 11th, 2026 https://isc.sans.edu/podcastdetail/10046, (Tue, Aug 11th)

SANS ISC →

SC Media 📡 RSS Aug 10

Security researchers accidentally receive sensitive data through misconfigured email domains

Domains: noreply.net

SC Media →

SC Media 📡 RSS Aug 10

Storm-1175 actor deploys new StormEncryptor ransomware after N-central vulnerability exploitation

CVEs: CVE-2026-18577

SC Media →

GBHackers 📡 RSS Aug 10

CISA Flags Progress LoadMaster Command Injection Vulnerability Exploited in the Wild

CVEs: CVE-2026-8037

GBHackers →

Help Net Security 📡 RSS Aug 10

N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577

CVEs: CVE-2026-18577

Help Net Security →

GBHackers 📡 RSS Aug 10

GitHub Expands Dependabot Malware Alerts to Detect Malicious Packages Across 8 Ecosystems

Domains: crates.io

GBHackers →

GBHackers 📡 RSS Aug 10

Apple Private Cloud Compute Path Traversal Flaw Lets Attackers Write Files as Root

CVEs: CVE-2026-20685

GBHackers →

Help Net Security 📡 RSS Aug 10

GitHub Dependabot malware alerts now cover eight ecosystems

Domains: crates.io

Help Net Security →

SANS ISC 📡 RSS Aug 10

ISC Stormcast For Monday, August 10th, 2026 https://isc.sans.edu/podcastdetail/10044, (Mon, Aug 10th)

SANS ISC →

Exploit Database 📡 RSS Aug 10

[webapps] Joomla 2.9.99.4 - Unauthenticated Remote Code Execution

IPs: 2.9.99.4

Exploit Database →

Security Affairs 📡 RSS Aug 8

U.S. CISA adds a Progress LoadMaster flaw to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-8037

Security Affairs →