Indicators of Compromise

The Hacker News 📡 RSS Sep 14

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

Domains: wordpress.org

The Hacker News →

Security Affairs 📡 RSS Sep 14

U.S. CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-42016

Security Affairs →

Check Point Research 📡 RSS Sep 14

14th September – Threat Intelligence Report

Domains: idscan.net

Check Point Research →

Rapid7 Blog 📡 RSS Sep 14

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

CVEs: CVE-2026-85706

Rapid7 Blog →

GBHackers 📡 RSS Sep 14

China-Linked Hackers Exploit Sogou One-Click RCE to Deploy GRAYRABBIT Backdoor

CVEs: CVE-2026-51990

GBHackers →

Help Net Security 📡 RSS Sep 14

WhatsApp Restricted Chat locks a conversation to your primary phone

IPs: 2.26.36.5

Help Net Security →

The Hacker News 📡 RSS Sep 14

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

Domains: jeetbot.cc

The Hacker News →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-686: Linux Kernel nftables Race Condition Local Privilege Escalation Vulnerability

CVEs: CVE-2026-74565

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-685: Linux Kernel NFC NCI UART Driver Race Condition Local Privilege Escalation Vulnerability

CVEs: CVE-2025-38416

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-684: Linux Kernel KSMBD Query Directory Request Race Condition Remote Code Execution Vulnerability

CVEs: CVE-2026-64397

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-683: Linux Kernel IPv6 VTI Subsystem Use-After-Free Local Privilege Escalation Vulnerability

CVEs: CVE-2026-72463

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-682: Linux Kernel IPv6 Neighbour Discovery Uninitialized Memory Information Disclosure Vulnerability

CVEs: CVE-2026-43040

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-681: Linux Kernel FUSE Subsystem Race Condition Local Privilege Escalation Vulnerability

CVEs: CVE-2026-64265

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-680: Linux Kernel Crypto Subsystem Use-After-Free Local Privilege Escalation Vulnerability

CVEs: CVE-2026-31719

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-702: Linux Kernel usbnet Driver Race Condition Privilege Escalation Vulnerability

CVEs: CVE-2025-22050

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-701: Linux Kernel TLS Protocol Out-Of-Bounds Read Information Disclosure Vulnerability

CVEs: CVE-2026-64046

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-700: Linux Kernel QFQ Plus Scheduler Use-After-Free Local Privilege Escalation Vulnerability

CVEs: CVE-2026-22999

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-696: Linux Kernel NTFS3 Journal Heap-based Buffer Overflow Code Execution Vulnerability

CVEs: CVE-2026-72196

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-695: Linux Kernel NFSv4 Server Race Condition Remote Code Execution Vulnerability

CVEs: CVE-2026-89688

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 14

ZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation Vulnerability

CVEs: CVE-2026-23413

Zero Day Initiative →