● Threat Intelligence Report

Generated 2026-08-23 16:00 UTC  ·  3/3 sources live  ·  ← back to cyberassist
↻ Refresh⇩ Download PDF
1674
KEV catalog total
9
Added last 7 days
352
Ransomware-linked
35
Fresh IOCs / pulses

Latest CISA Known Exploited Vulnerabilities live

CVEVendor / ProductVulnerabilityAddedDue
CVE-2026-73570Synacor
Zimbra Collaboration Suite (ZCS)		Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability2026-08-212026-08-24
CVE-2026-72530TrueConf
Server		TrueConf Server Code Injection Vulnerability2026-08-202026-09-03
CVE-2026-72529TrueConf
Server		TrueConf Server Missing Authentication for Critical Function Vulnerability2026-08-202026-08-23
CVE-2026-64849MLflow
MLflow		MLflow Server-Side Request Forgery Vulnerability2026-08-192026-09-02
CVE-2026-33824Microsoft
Internet Key Exchange (IKE) Service Extensions		Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability2026-08-182026-08-21
CVE-2026-59310Broadcom
VMware vCenter		Broadcom VMware vCenter Path Traversal Vulnerability2026-08-182026-08-21
CVE-2026-55040Microsoft
SharePoint		Microsoft SharePoint Weak Authentication Vulnerability2026-08-182026-08-21
CVE-2026-65400Apple
macOS		Apple macOS Improper Authentication Vulnerability2026-08-182026-08-21
CVE-2025-62593Ray-Project
Ray		Ray-Project Ray Code Injection Vulnerability2026-08-172026-08-20
CVE-2026-20349Cisco
Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) 		Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability2026-08-112026-08-14
CVE-2026-68820Microsoft
Windows Ancillary Function Driver for WinSock 		Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability2026-08-112026-08-25
CVE-2026-72898Metabase
Metabase		Metabase SQL Injection Vulnerability2026-08-112026-08-14
CVE-2026-8037Progress
LoadMaster		Progress LoadMaster Command Injection Vulnerability2026-08-072026-08-10
CVE-2026-63077JetBrains
TeamCity		JetBrains TeamCity Deserialization of Untrusted Data Vulnerability2026-08-052026-08-08
CVE-2026-18556N-able
N-central		N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability2026-08-042026-08-07
CVE-2026-34486Apache
Tomcat		Apache Tomcat Missing Encryption of Sensitive Data Vulnerability2026-08-042026-08-07
CVE-2026-9198IBM
Langflow		IBM Langflow Code Injection Vulnerability2026-08-042026-08-07
CVE-2026-18577N-able
N-central		N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability2026-08-032026-08-06
CVE-2026-20316Cisco
Secure Firewall Management Center (FMC)		Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability2026-07-292026-08-01
CVE-2025-68686Fortinet
FortiOS		Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability2026-07-272026-08-10
CVE-2026-16812Arista
VeloCloud Orchestrator		Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability2026-07-272026-07-30
CVE-2026-16232Check Point
SmartConsole		Check Point SmartConsole Improper Authentication Vulnerability2026-07-222026-07-25
CVE-2026-50522Microsoft
SharePoint		Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-07-222026-07-25
CVE-2026-60137WordPress
Core		WordPress Core SQL Injection Vulnerability2026-07-212026-08-04
CVE-2026-63030WordPress
Core		WordPress Core Interpretation Conflict Vulnerability2026-07-212026-07-24

Recent Malware IOCs — ThreatFox live

IndicatorTypeMalwareThreatConf.First seen
rf65356zl4.workers.devdomainphp.shin_webshellbotnet_cc50%2026-08-23 15:41:18 UTC
smtp.coralbridge.ccdomainVidarbotnet_cc100%2026-08-23 15:38:49 UTC
http://115.54.128.38:41331/Mozi.murlMozipayload_delivery75%2026-08-23 15:21:13 UTC
http://221.14.14.113:44549/Mozi.murlMozipayload_delivery75%2026-08-23 15:21:12 UTC
http://103.65.30.142:38983/Mozi.murlMozipayload_delivery75%2026-08-23 15:21:11 UTC
http://110.38.240.188:46981/Mozi.murlMozipayload_delivery75%2026-08-23 15:21:11 UTC
http://110.38.250.142:50982/Mozi.murlMozipayload_delivery75%2026-08-23 15:21:10 UTC
http://119.73.19.38:45279/Mozi.murlMozipayload_delivery75%2026-08-23 15:21:10 UTC
http://110.38.240.183:34521/Mozi.murlMozipayload_delivery75%2026-08-23 15:21:09 UTC
http://223.123.42.238:59720/Mozi.murlMozipayload_delivery75%2026-08-23 15:21:09 UTC
http://80.83.230.144:53523/Mozi.murlMozipayload_delivery75%2026-08-23 15:21:08 UTC
http://153.117.33.131:55231/Mozi.aurlMozipayload_delivery75%2026-08-23 15:21:07 UTC
http://103.237.157.188:60261/Mozi.murlMozipayload_delivery75%2026-08-23 15:21:07 UTC
http://223.123.73.169:35385/Mozi.murlMozipayload_delivery75%2026-08-23 15:21:06 UTC
http://shhsift.click:7647/permissionsurlRemusbotnet_cc75%2026-08-23 15:15:25 UTC
ipekwgai.eng-usa-us-menbalancepro.comdomainClearFakepayload_delivery100%2026-08-23 15:15:03 UTC
qfbxg48239.workers.devdomainphp.shin_webshellbotnet_cc50%2026-08-23 15:13:46 UTC
eng-usa-us-menbalancepro.comdomainClearFakepayload_delivery100%2026-08-23 15:10:56 UTC
https://espossto.lol/api/v1/verifyurlKongTukepayload_delivery100%2026-08-23 15:08:20 UTC
https://espossto.lol/api/v1/sessionurlKongTukepayload_delivery100%2026-08-23 15:08:19 UTC
espossto.loldomainKongTukepayload_delivery100%2026-08-23 15:08:18 UTC
epquo73102.workers.devdomainphp.shin_webshellbotnet_cc50%2026-08-23 15:08:07 UTC
http://kupzovo.shop:7567/teamsurlRemusbotnet_cc75%2026-08-23 15:05:16 UTC
http://bravplo.click:7713/tagsurlRemusbotnet_cc75%2026-08-23 15:05:13 UTC
81.69.226.164:22ip:portCobalt Strikebotnet_cc100%2026-08-23 15:05:07 UTC

Community Threat Pulses — AlienVault OTX live

PulseAuthorTagsIOCsCreated
Security Advisory - Action Required - July 2026 Security UpdateAlienVaultprivilege escalation, cve-2026-62144, cve-2026-62145, active exploitation, firewall, cve-2026-16232, gaiaos, management products42026-07-24
Ongoing PLC Exploitation Against Critical U.S. InfrastructureAlienVaultindustrial control systems, critical infrastructure, water facilities, malpdb, ot security, irgc-cec, plc exploitation, iocontrol102026-07-24
Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant StagedAlienVaultcve-2026-43500, hiveserver2 exploitation, apache hadoop targeting, cve-2026-43284, vshell, cve-2017-7269, suo5, shadowpad232026-07-23
Global Webmail EspionageAlienVaultcyberespionage, laundry bear, cve-2025-66376, zimbra, russian threat actor, zero-click phishing, javascript injection, void blizzard102026-07-23
A New Name in the Data Extortion Ecosystem?AlienVaultdata extortion, identity-based attacks, sharepoint exfiltration, vishing, blackfile, mfa abuse, shinyhunters, device code phishing12026-07-23
Exploitation in the Wild of wp2shellAlienVaultplugin upload, cmsmap, cve-2026-63030, cve-2026-60137, wordpress, pre-authentication, rce, batch api exploitation72026-07-23
Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with SectopRATAlienVaultclaude ai, sectoprat, vmprotect, stealc, dll sideloading, malvertising, directx shader encryption, gpu anti-vm132026-07-23
JadeProx: Tracing a China-nexus Operation Through an OPSEC MistakeAlienVaultcve-2021-31755, china-nexus, triback loader, cve-2021-32305, adaptixc2, phishing, southeast asia targeting, xmrig592026-07-23
Supply Chain Attack on arrayref: Significant Overlap with DPRK CampaignsAlienVaultcrates.io, dprk, backdoor, typosquatting, supply chain attack, proc-macro1, mastra campaign, rust82026-08-20
Popular Rust Crates Compromised in Build-Time Supply Chain AttackAlienVaultbackdoor, proc-macro1, typosquatting, supply chain attack, proc-macro-en, build-time execution, rust, credential theft182026-08-20