ZDI-26-491: Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability
CVEs:
CVE-2026-43673
Indicators of Compromise
419 articles containing extracted IOCs (CVEs, IPs, hashes, domains, URLs, emails)
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
NGINX Heap Overflow Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
CVEs:
CVE-2026-42533
ISC Stormcast For Wednesday, July 29th, 2026 https://isc.sans.edu/podcastdetail/10028, (Wed, Jul 29th)
Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)
CVEs:
CVE-2026-16232
Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root
CVEs:
CVE-2026-53921
MikroTik RouterOS and Cloud Hosted Router
CVEs:
CVE-2026-16347
Siemens SIMATIC S7-PLCSIM Advanced
CVEs:
CVE-2026-54429
igloohome Smart Lock Mobile Application
CVEs:
CVE-2026-16581
JetBrains Patches Critical TeamCity Flaw Allowing Server Takeover
CVEs:
CVE-2026-63077
JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)
CVEs:
CVE-2026-63077
Critical TeamCity Flaw Lets Unauthenticated Attackers Execute System Commands
CVEs:
CVE-2026-63077
AI-Discovered Linux Kernel Zero-Day Enables Root Privilege Escalation
CVEs:
CVE-2026-53264
U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog
CVEs:
CVE-2025-68686
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
CVEs:
CVE-2026-63077
Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
CVEs:
CVE-2026-53264
Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
CVEs:
CVE-2026-16812
ISC Stormcast For Tuesday, July 28th, 2026 https://isc.sans.edu/podcastdetail/10026, (Tue, Jul 28th)
Too Many AI Tools? Here’s How to Create Story Videos In One Workflow With Wondershare Media.io
Domains:
media.io
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
CVEs:
CVE-2026-27577