Indicators of Compromise

GBHackers 📡 RSS Jun 1

Windows Netlogon 0-Click RCE Vulnerability Under Active Exploitation

CVEs: CVE-2026-41089

GBHackers →

SANS ISC 📡 RSS Jun 1

ISC Stormcast For Monday, June 1st, 2026 https://isc.sans.edu/podcastdetail/9952, (Mon, Jun 1st)

SANS ISC →

Security Affairs 📡 RSS May 31

CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers

CVEs: CVE-2026-0257

Security Affairs →

Security Affairs 📡 RSS May 31

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 99

CVEs: CVE-2026-26980

Domains: crates.io

Security Affairs →

BleepingComputer 📡 RSS May 30

Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks

CVEs: CVE-2026-0257

BleepingComputer →

GBHackers 📡 RSS May 30

Palo Alto PAN-OS Authentication Bypass Vulnerability Actively Exploited in the Wild

CVEs: CVE-2026-0257

GBHackers →

The Hacker News 📡 RSS May 30

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

CVEs: CVE-2026-0257

The Hacker News →

Rapid7 Blog 📡 RSS May 29

Metasploit Wrap Up 05/29/2026

CVEs: CVE-2026-43284 CVE-2026-43500 CVE-2026-3055

Rapid7 Blog →

The Hacker News 📡 RSS May 29

ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface

Domains: chatgpt.com

The Hacker News →

SC Media 📡 RSS May 29

CISA adds Daemon Tools, TanStack, and Nx Console compromised versions to KEV catalog

CVEs: CVE-2026-8398 CVE-2026-45321 CVE-2026-48027

SC Media →

Rapid7 Blog 📡 RSS May 29

Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)

CVEs: CVE-2026-0257

Rapid7 Blog →

The Hacker News 📡 RSS May 29

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit

CVEs: CVE-2026-39987

The Hacker News →

CISA Advisories 📡 RSS May 29

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2026-0257

CISA Advisories →

Help Net Security 📡 RSS May 29

New infostealer reaches enterprise devices through FortiClient EMS vulnerability

CVEs: CVE-2026-35616

Help Net Security →

CSO Online 📡 RSS May 29

Notepad++ vulnerabilities could enable arbitrary code execution on Windows systems

CVEs: CVE-2026-48778 CVE-2026-48800

IPs: 8.9.6.1

CSO Online →

GBHackers 📡 RSS May 29

Samba Security Flaw Lets Attackers Execute Code Remotely

CVEs: CVE-2026-4480

GBHackers →

GBHackers 📡 RSS May 29

OpenVPN Connect macOS Vulnerability Allows Remote Command Execution

CVEs: CVE-2026-9560

GBHackers →

SANS ISC 📡 RSS May 29

ISC Stormcast For Friday, May 29th, 2026 https://isc.sans.edu/podcastdetail/9950, (Fri, May 29th)

SANS ISC →

BleepingComputer 📡 RSS May 28

Hackers exploit FortiClient EMS flaw to push infostealer malware

CVEs: CVE-2026-35616

BleepingComputer →

Security Affairs 📡 RSS May 28

CVE-2026-35616: FortiClient EMS Flaw Actively Exploited in Malware Attacks

CVEs: CVE-2026-35616

Security Affairs →