Indicators of Compromise

SANS ISC 📡 RSS Aug 25

Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)

IPs: 169.254.169.254

SANS ISC →

SecurityWeek 📡 RSS Aug 25

WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities

CVEs: CVE-2026-61979 CVE-2026-15981

SecurityWeek →

SC Media 📡 RSS Aug 25

Unpatched Calix router vulnerability allows remote attackers to expose home networks

CVEs: CVE-2026-75501

SC Media →

CISA Advisories 📡 RSS Aug 25

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2026-60004

CISA Advisories →

GBHackers 📡 RSS Aug 25

Multiple Zscaler Client Connector Flaws Enable Remote Code Execution

CVEs: CVE-2026-59568

GBHackers →

Help Net Security 📡 RSS Aug 25

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks

CVEs: CVE-2026-73570

Help Net Security →

Security Affairs 📡 RSS Aug 25

U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-21962

Security Affairs →

GBHackers 📡 RSS Aug 25

Critical miniOrange SAML SSO Flaws Let Attackers Take Over WordPress Admin Accounts

CVEs: CVE-2026-61979 CVE-2026-15981

GBHackers →

The Hacker News 📡 RSS Aug 25

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

CVEs: CVE-2026-61979

The Hacker News →

GBHackers 📡 RSS Aug 25

Critical Red Hat Keycloak Password Reset Flaw Enables Unauthenticated Account Takeover

CVEs: CVE-2026-18963

GBHackers →

SecurityWeek 📡 RSS Aug 25

CISA Warns of Exploited Oracle WebLogic Vulnerability

CVEs: CVE-2026-21962

SecurityWeek →

The Hacker News 📡 RSS Aug 25

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

CVEs: CVE-2026-21962

The Hacker News →

GBHackers 📡 RSS Aug 25

Hackers Exploit Critical Oracle HTTP Server Flaw to Access and Modify Sensitive Data

CVEs: CVE-2026-21962

GBHackers →

SANS ISC 📡 RSS Aug 25

ISC Stormcast For Tuesday, August 25th, 2026 https://isc.sans.edu/podcastdetail/10066, (Tue, Aug 25th)

SANS ISC →

Qualys Blog 📡 RSS Aug 25

CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days

CVEs: CVE-2026-69414

Qualys Blog →

Exploit Database 📡 RSS Aug 25

[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE

CVEs: CVE-2026-42167

Exploit Database →

SC Media 📡 RSS Aug 24

WordPress plugin vulnerabilities allow admin account takeover

CVEs: CVE-2026-61979 CVE-2026-15981

SC Media →

Rapid7 Blog 📡 RSS Aug 24

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

CVEs: CVE-2026-63520

Rapid7 Blog →

CISA Advisories 📡 RSS Aug 24

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2026-21962

CISA Advisories →

The Hacker News 📡 RSS Aug 24

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

CVEs: CVE-2026-18963

The Hacker News →