Indicators of Compromise

SANS ISC 📡 RSS Sep 9

ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th)

SANS ISC →

SC Media 📡 RSS Sep 8

MikroTik routers targeted by active SSH zero-day exploitation

CVEs: CVE-2026-67276 CVE-2026-86060

SC Media →

SC Media 📡 RSS Sep 8

Broadcom patches critical VMware Workstation and Fusion VM escape vulnerabilities

CVEs: CVE-2026-59346

SC Media →

SecurityWeek 📡 RSS Sep 8

Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day

CVEs: CVE-2026-75650

SecurityWeek →

Tenable Blog 📡 RSS Sep 8

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

CVEs: CVE-2026-81963 CVE-2026-85880

Domains: asp.net

Tenable Blog →

Tenable Blog 📡 RSS Sep 8

StyleSmuggler (CVE-2026-75650): Frequently asked questions about Adobe Commerce and Magento zero-day

CVEs: CVE-2026-75650

Tenable Blog →

BleepingComputer 📡 RSS Sep 8

Adobe fixes critical Magento zero-day exploited to backdoor servers

CVEs: CVE-2026-75650

BleepingComputer →

CISA Advisories 📡 RSS Sep 8

CareCam Pro IP Cameras

CVEs: CVE-2026-85083

CISA Advisories →

CISA Advisories 📡 RSS Sep 8

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2026-75650 CVE-2026-81963 CVE-2026-85880 CVE-2026-86218

CISA Advisories →

CSO Online 📡 RSS Sep 8

Adobe Commerce max-severity bug comes under active attack

IPs: 99.84.67.186

CSO Online →

Rapid7 Blog 📡 RSS Sep 8

CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

CVEs: CVE-2026-86206 CVE-2026-86207 CVE-2026-18577

Rapid7 Blog →

GBHackers 📡 RSS Sep 8

ASUS Control Center Critical Flaw Allows Unauthenticated Attackers to Gain Root Access

CVEs: CVE-2026-19397

GBHackers →

GBHackers 📡 RSS Sep 8

SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws

CVEs: CVE-2026-44756

GBHackers →

The Hacker News 📡 RSS Sep 8

Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

CVEs: CVE-2026-75650

The Hacker News →

GBHackers 📡 RSS Sep 8

Hackers Hijack Coder Module Registry to Distribute Credential-Stealing Malicious Packages

Domains: registry.coder.com

GBHackers →

Zero Day Initiative 📡 RSS Sep 8

ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability

CVEs: CVE-2026-50696

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 8

ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation Vulnerability

CVEs: CVE-2026-62712

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 8

ZDI-26-620: Microsoft Windows UMPDDrvPlgBlt Improper Object Management Local Privilege Escalation Vulnerability

CVEs: CVE-2026-62712

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 8

ZDI-26-619: Microsoft Windows UMPDDrvStretchBltROP Improper Object Management Local Privilege Escalation Vulnerability

CVEs: CVE-2026-62712

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 8

ZDI-26-618: Microsoft Windows UMPDDrvStretchBlt Improper Object Management Local Privilege Escalation Vulnerability

CVEs: CVE-2026-62712

Zero Day Initiative →