IOC Feed — FreeIntelHub

The Hacker News 📡 RSS Jul 23

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

CVEs: CVE-2026-64600

The Hacker News →

The Hacker News 📡 RSS Jul 23

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

CVEs: CVE-2026-16232

The Hacker News →

Zero Day Initiative 📡 RSS Jul 23

ZDI-26-450: AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability

CVEs: CVE-2026-12921

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 23

ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

CVEs: CVE-2026-12390

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 23

ZDI-26-448: Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability

CVEs: CVE-2026-6851

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 23

ZDI-26-447: Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-12357

Zero Day Initiative →

SANS ISC 📡 RSS Jul 23

ISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd)

SC Media 📡 RSS Jul 22

Adobe Acrobat extension vulnerability allowed WhatsApp data theft

CVEs: CVE-2026-48294

Security Affairs 📡 RSS Jul 22

CVE-2026-8933: Ubuntu security flaw breaks Snap sandbox protections

CVEs: CVE-2026-8933

Security Affairs →

Security Affairs 📡 RSS Jul 22

Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft

CVEs: CVE-2026-48294

Security Affairs →

The Hacker News 📡 RSS Jul 22

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

CVEs: CVE-2026-8933

The Hacker News →

Qualys Blog 📡 RSS Jul 22

RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)

CVEs: CVE-2026-64600

Qualys Blog →

The Hacker News 📡 RSS Jul 22

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

CVEs: CVE-2026-48294

The Hacker News →

The Hacker News 📡 RSS Jul 22

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

CVEs: CVE-2026-29059

The Hacker News →

CISA Advisories 📡 RSS Jul 22

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2026-16232 CVE-2026-50522

CISA Advisories →

The Hacker News 📡 RSS Jul 22

Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

Domains: newtonsoftt.json.net

The Hacker News →

SANS ISC 📡 RSS Jul 22

ISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd)

Security Affairs 📡 RSS Jul 21

Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522

CVEs: CVE-2026-50522

Security Affairs →

Security Affairs 📡 RSS Jul 21

Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access

CVEs: CVE-2026-0257

Security Affairs →

Qualys Blog 📡 RSS Jul 21

CVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confine

CVEs: CVE-2026-8933

Qualys Blog →