Indicators of Compromise

The Hacker News 📡 RSS Jun 8

Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

CVEs: CVE-2026-50751

The Hacker News →

Security Affairs 📡 RSS Jun 8

Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access

CVEs: CVE-2026-3300

Security Affairs →

SC Media 📡 RSS Jun 8

Toshiba and Muji warn of fake login screens from polyfill.io

Domains: polyfill.io

SC Media →

Help Net Security 📡 RSS Jun 8

Qilin ransomware affiliate exploited Check Point VPN zero-day (CVE-2026-50751)

CVEs: CVE-2026-50751

Help Net Security →

GBHackers 📡 RSS Jun 8

Multiple VMware Stored XSS Flaw Enable Attackers to Inject Malicious Scripts

CVEs: CVE-2026-41722 CVE-2026-41723 CVE-2026-41724

GBHackers →

CISA Advisories 📡 RSS Jun 8

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2026-42271 CVE-2026-50751

CISA Advisories →

Help Net Security 📡 RSS Jun 8

CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)

CVEs: CVE-2026-28318

Help Net Security →

GBHackers 📡 RSS Jun 8

Critical Redis Vulnerability Could Let Attackers Execute Code and Hijack Servers

CVEs: CVE-2026-23631

GBHackers →

Security Affairs 📡 RSS Jun 8

IoT Botnet C0XMO Adds Competitor-Killing Capability

CVEs: CVE-2021-27137

Security Affairs →

SANS ISC 📡 RSS Jun 8

ISC Stormcast For Monday, June 8th, 2026 https://isc.sans.edu/podcastdetail/9962, (Mon, Jun 8th)

SANS ISC →

Security Affairs 📡 RSS Jun 6

U.S. CISA adds SolarWinds Serv-U flaw to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-28318

Security Affairs →

BleepingComputer 📡 RSS Jun 6

Critical Everest Forms Pro flaw exploited to take over WordPress sites

CVEs: CVE-2026-3300

BleepingComputer →

GBHackers 📡 RSS Jun 6

Critical UniFi OS Auth Bypass Flaws Lead to Unauthenticated Root RCE

CVEs: CVE-2026-34908 CVE-2026-34909 CVE-2026-34910

GBHackers →

GBHackers 📡 RSS Jun 6

CISA Alerts on Actively Exploited SolarWinds Serv-U Denial-of-Service Flaw

CVEs: CVE-2026-28318

GBHackers →

The Hacker News 📡 RSS Jun 6

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

CVEs: CVE-2026-28318

The Hacker News →

The Hacker News 📡 RSS Jun 6

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

CVEs: CVE-2026-20245

The Hacker News →

SC Media 📡 RSS Jun 5

Hackers actively exploit SolarWinds Serv-U flaw to crash servers, CISA warns

CVEs: CVE-2026-28318

SC Media →

Unit 42 📡 RSS Jun 5

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257

CVEs: CVE-2026-0257

Unit 42 →

Security Affairs 📡 RSS Jun 5

Cisco SD-WAN Has a New Root-Level Problem, and There’s No Fix Yet

CVEs: CVE-2026-20245

Security Affairs →

GBHackers 📡 RSS Jun 5

New Magecart Attack Abuses Stripe as Malware C2

Domains: googletagmanager.com

GBHackers →