Indicators of Compromise

Zero Day Initiative 📡 RSS Sep 8

ZDI-26-617: Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

CVEs: CVE-2026-66804

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 8

ZDI-26-616: Koha Eval Code Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-19780

Zero Day Initiative →

SANS ISC 📡 RSS Sep 8

ISC Stormcast For Tuesday, September 8th, 2026 https://isc.sans.edu/podcastdetail/10084, (Tue, Sep 8th)

SANS ISC →

GBHackers 📡 RSS Sep 7

PoisonedRefresh Malware Backdoors F5 BIG-IP Servers With Memory-Only PHP Web Shells

CVEs: CVE-2025-53521

GBHackers →

Infosecurity Magazine 📡 RSS Sep 7

N-able Releases Hotfix for Critical Remote Code Execution Vulnerability

CVEs: CVE-2026-86218

Infosecurity Magazine →

Help Net Security 📡 RSS Sep 7

N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)

CVEs: CVE-2026-86218

Help Net Security →

CSO Online 📡 RSS Sep 7

Back-to-back N-able bugs send admins on a patching spree

CVEs: CVE-2026-86218

CSO Online →

The Hacker News 📡 RSS Sep 7

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

Domains: asp.net

The Hacker News →

GBHackers 📡 RSS Sep 7

Telerik UI Flaws Let Attackers Chain AES-CBC Padding Oracle to Unauthenticated RCE

Domains: asp.net

GBHackers →

GBHackers 📡 RSS Sep 7

Critical N-able N-central Flaw Enables Pre-Auth Remote Code Execution

CVEs: CVE-2026-86218

GBHackers →

GBHackers 📡 RSS Sep 7

Hackers Exploit PaperCut NG/MF Flaws to Steal Credentials and Deploy Meterpreter

CVEs: CVE-2026-81578 CVE-2026-82078

GBHackers →

GBHackers 📡 RSS Sep 7

Critical ASUS Control Center CVE-2026-75754 Flaw Allows Unauthenticated Root Access

CVEs: CVE-2026-75754

IPs: 4.0.0.2

GBHackers →

Security Affairs 📡 RSS Sep 5

PaperCut Flaws Exploited in Attacks on U.S. and European Schools

CVEs: CVE-2026-81578 CVE-2026-82078

Security Affairs →

The Hacker News 📡 RSS Sep 5

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

CVEs: CVE-2026-59346

The Hacker News →

SecurityWeek 📡 RSS Sep 5

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

CVEs: CVE-2026-32475

SecurityWeek →

GBHackers 📡 RSS Sep 5

12-Year-Old PostgreSQL Flaw Lets Attackers Execute Code and Take Over Database Servers

CVEs: CVE-2026-6471

GBHackers →

The Hacker News 📡 RSS Sep 5

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

CVEs: CVE-2026-81578 CVE-2026-82078

The Hacker News →

Security Affairs 📡 RSS Sep 4

U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-85046

Security Affairs →

SC Media 📡 RSS Sep 4

Cisco addresses critical vulnerabilities in Nexus 9000 switches and IOS XR

CVEs: CVE-2026-20212

SC Media →

SecurityWeek 📡 RSS Sep 4

HPE Patches Critical RCE Vulnerabilities in AOS-CX

CVEs: CVE-2026-73749

SecurityWeek →