● Threat Intelligence Report

Generated 2026-10-07 20:06 UTC  ·  3/3 sources live  ·  ← back to cyberassist
↻ Refresh⇩ Download PDF
1734
KEV catalog total
4
Added last 7 days
361
Ransomware-linked
35
Fresh IOCs / pulses

Latest CISA Known Exploited Vulnerabilities live

CVEVendor / ProductVulnerabilityAddedDue
CVE-2026-88779Citrix
NetScaler		Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability2026-10-042026-10-07
CVE-2026-102490Zammad GmbH
Zammad		Zammad GmbH Zammad Improper Privilege Management Vulnerability2026-10-022026-10-05
CVE-2026-102489Zammad GmbH
Zammad		Zammad GmbH Zammad Session Fixation Vulnerability2026-10-022026-10-05
CVE-2026-104286Fortinet
FortiMail		Fortinet FortiMail Path Traversal Vulnerability2026-10-012026-10-04
CVE-2026-76504Cisco
Catalyst SD-WAN Manager		Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability2026-09-302026-10-03
CVE-2026-86950Apple
Multiple Products		Apple Multiple Products Out-of-Bounds Write Vulnerability2026-09-292026-10-02
CVE-2026-88772Citrix
NetScaler		Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability2026-09-272026-09-30
CVE-2026-88771Citrix
NetScaler		Citrix NetScaler Improper Input Validation Vulnerability2026-09-272026-09-30
CVE-2026-67279MikroTik
RouterOS		Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability2026-09-252026-09-28
CVE-2026-65660Microsoft
SharePoint		Microsoft SharePoint Code Injection Vulnerability2026-09-252026-09-28
CVE-2026-87902WordPress
Core		WordPress Core Remote File Inclusion Vulnerability2026-09-252026-09-28
CVE-2026-5430WSO2
Multiple Products		WSO2 Multiple Products Path Traversal Vulnerability 2026-09-242026-09-27
CVE-2026-71362Adobe
Commerce and Magento 		Adobe Commerce and Magento Incorrect Authorization Vulnerability 2026-09-242026-09-27
CVE-2026-93952Arista
VeloCloud Orchestrator		Arista VeloCloud Orchestrator Improper Input Validation Vulnerability2026-09-222026-09-25
CVE-2026-94127F5
BIG-IP APM		F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability2026-09-222026-09-25
CVE-2026-93616Check Point
Multiple Products		Check Point Multiple Products Path Traversal Vulnerability2026-09-222026-09-25
CVE-2026-85102Check Point
Multiple Products		Check Point Multiple Products Improper Certificate Validation Vulnerability2026-09-222026-09-25
CVE-2026-7273Zyxel
GS1900 Series Switches		Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability2026-09-212026-09-24
CVE-2025-39964Linux
Kernel		Linux Kernel Race Condition Vulnerability2026-09-182026-09-21
CVE-2026-53266Linux
Kernel		Linux Kernel Out-of-Bounds Write Vulnerability2026-09-182026-09-21
CVE-2025-39682Linux
Kernel		Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability2026-09-182026-09-21
CVE-2026-58704Google
Pixel		Google Pixel Improper Authorization Vulnerability2026-09-162026-09-19
CVE-2026-76460Cisco
Identity Services Engine		Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability2026-09-162026-09-19
CVE-2026-87886Acronis
Backup		Acronis Backup Incorrect Default Permissions Vulnerability2026-09-162026-09-19
CVE-2026-76461Cisco
Secure Email Gateway		Cisco Secure Email Gateway SQL Injection Vulnerability2026-09-142026-09-17

Recent Malware IOCs — ThreatFox live

IndicatorTypeMalwareThreatConf.First seen
114.215.184.158:8000ip:portCobalt Strikebotnet_cc100%2026-10-07 20:05:03 UTC
lunelle.clickdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
luniva.blogdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
moonvelvet.onlinedomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
nekomoonkai.topdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
novaloom.onlinedomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
nyakurohana.shopdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
olivelle.onlinedomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
onikirayume.shopdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
orluna.blogdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
rada24ukraine.topdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
radassu.topdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
radaukraine.topdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
seralune.onlinedomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
serelle.blogdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
servilivej.onlinedomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
silvermuse.onlinedomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
solavelle.onlinedomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
soleva.blogdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
solivellse.onlinedomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
sorakitsumi.shopdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
tsukinorami.shopdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
ukraine77.topdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
ukrainerada.topdomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC
velamira.onlinedomainUnknown Stealerpayload_delivery75%2026-10-07 20:05:00 UTC

Community Threat Pulses — AlienVault OTX live

PulseAuthorTagsIOCsCreated
StyleSmuggler: Magento and Adobe Commerce 0-day RCE under active attackAlienVaultremote code execution, adobe commerce, rust backdoor, zero-day, stylesmuggler252026-09-07
Tracking BigBear 2.0 Evilginx2 Phishing CampaignAlienVaultphishing-as-a-service, evilginx2, microsoft 365, bigbear 2.0, bigbear272026-09-07
Behind the Connect Button: The Fake AI Ads CampaignAlienVaultsocket.io, social engineering, phishing campaign, mfa bypass, browser-in-the-browser, credential theft, advertising accounts, ai impersonation1082026-10-07
Akira Ransomware Attack InvestigationAlienVaultdata exfiltration, antivirus evasion, rclone, ransomware, rdp, persistence, akira, gost tunnel32026-10-07
Iranian State-Aligned Threat Actor Masquerading as Dubai Airports IT Department Delivering Trojanized Coding Challenges - Blinder Tunnel Campaign Targeting Iraqi Critical InfrastructureAlienVaultappdomainmanager hijacking, blackwood.dll, blinder tunnel, chisel, dll sideloading, shelbyloader v2, iraqi critical infrastructure, runtimebroker.dll322026-10-07
Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock accessAlienVaultamazon bedrock, credential validation, anthropic claude, token-jacking, credential harvesting, cloud security, llm, aws362026-10-06
Attackers Target AI Development Platform LangflowAlienVaultcve-2017-9841, cve-2021-26855, cve-2018-20062, cve-2025-55184, unauthenticated access, cve-2021-34523, credential harvesting, ai platform exploitation172026-10-07
Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent StealerAlienVaultbyovd, lunexstealer, cve-2023-20598, pdfwkrnl.sys, kernel callback manipulation, cryptocurrency wallet theft, native messaging host persistence, amd driver vulnerability402026-10-06
ClingSTUN Linux Backdoor Abuses Public STUN InfrastructureAlienVaultcve-2024-32314, proxy botnet, cve-2026-87827, cve-2023-41011, cve-2021-35394, cve-2024-21887, cve-2022-35555, cve-2014-8361832026-10-05
StyleSmuggler: Magento and Adobe Commerce 0-day RCE under active attackAlienVaultbackdoor, stylesmuggler, magento, payment email, remote code execution, graphql, adobe commerce, zero-day152026-09-05