Indicators of Compromise

SANS ISC 📡 RSS Sep 22

ISC Stormcast For Tuesday, September 22nd, 2026 https://isc.sans.edu/podcastdetail/10104, (Tue, Sep 22nd)

SANS ISC →

Help Net Security 📡 RSS Sep 21

North Korea’s job interview scam runs both ways

Domains: crates.io

Help Net Security →

CISA Advisories 📡 RSS Sep 21

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2026-7273

CISA Advisories →

Google Project Zero 📡 RSS Sep 21

Windows Exploitation Techniques: Dangling COM Object Registrations

CVEs: CVE-2026-66804 CVE-2026-50343

Google Project Zero →

SANS ISC 📡 RSS Sep 21

ISC Stormcast For Monday, September 21st, 2026 https://isc.sans.edu/podcastdetail/10102, (Mon, Sep 21st)

SANS ISC →

GBHackers 📡 RSS Sep 21

Hackers Abuse Critical cPanel Authentication Bypass to Compromise Hosting Servers

CVEs: CVE-2026-41940

GBHackers →

The Hacker News 📡 RSS Sep 19

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

CVEs: CVE-2026-28326

The Hacker News →

The Hacker News 📡 RSS Sep 19

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

CVEs: CVE-2026-58138

The Hacker News →

The Hacker News 📡 RSS Sep 19

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

CVEs: CVE-2025-39682

The Hacker News →

The Hacker News 📡 RSS Sep 18

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

Domains: wordpress.org

The Hacker News →

The Hacker News 📡 RSS Sep 18

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

CVEs: CVE-2026-85889

The Hacker News →

CISA Advisories 📡 RSS Sep 18

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2025-39964 CVE-2026-53266

CISA Advisories →

CISA Advisories 📡 RSS Sep 18

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2025-39682

CISA Advisories →

GBHackers 📡 RSS Sep 18

Linux Kernel Hit by 4 LPE Flaws Enabling Attackers to Gain Root Shell

CVEs: CVE-2026-80844 CVE-2026-81000 CVE-2026-68121 CVE-2026-74469

GBHackers →

GBHackers 📡 RSS Sep 18

Critical pgAdmin Authentication Bypass Lets Attackers Login as Administrator Without Credentials

CVEs: CVE-2026-86863

GBHackers →

SecurityWeek 📡 RSS Sep 18

Critical Orkes Conductor Vulnerability Exploited in Attacks

CVEs: CVE-2026-58138

SecurityWeek →

Security Affairs 📡 RSS Sep 18

Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution

CVEs: CVE-2026-91843

Security Affairs →

Zero Day Initiative 📡 RSS Sep 18

ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability

CVEs: CVE-2026-20235

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 18

ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVEs: CVE-2026-20211

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 18

ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-20176

Zero Day Initiative →