Indicators of Compromise

Zero Day Initiative 📡 RSS Aug 24

ZDI-26-591: NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-24272

Zero Day Initiative →

Zero Day Initiative 📡 RSS Aug 24

ZDI-26-590: libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-19773

Zero Day Initiative →

Zero Day Initiative 📡 RSS Aug 24

ZDI-26-589: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-19774

Zero Day Initiative →

Zero Day Initiative 📡 RSS Aug 24

ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

CVEs: CVE-2026-64715

Zero Day Initiative →

SANS ISC 📡 RSS Aug 24

ISC Stormcast For Monday, August 24th, 2026 https://isc.sans.edu/podcastdetail/10064, (Mon, Aug 24th)

SANS ISC →

Security Affairs 📡 RSS Aug 22

U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-73570

Security Affairs →

Help Net Security 📡 RSS Aug 21

Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836)

CVEs: CVE-2026-69836

Help Net Security →

CISA Advisories 📡 RSS Aug 21

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2026-73570

CISA Advisories →

GBHackers 📡 RSS Aug 21

Critical N-Able PassPortal Extension Flaw Gives Attackers Full Password Vault Access

CVEs: CVE-2026-15580

GBHackers →

Security Affairs 📡 RSS Aug 21

GitLab Warns of Active Exploitation of Critical GraphQL Flaw

CVEs: CVE-2026-19478

Security Affairs →

Security Affairs 📡 RSS Aug 21

GitLab Warns of Active Exploitation of Critical GraphQL Flaw

CVEs: CVE-2026-19478

Security Affairs →

CSO Online 📡 RSS Aug 21

Backdoored Rust packages hit crates.io, exposing developers to malware at build time

Domains: crates.io

CSO Online →

GBHackers 📡 RSS Aug 21

Critical Spring Security LDAP Flaw Lets Remote Attackers Read and Modify Directory Data

CVEs: CVE-2026-59270

GBHackers →

Security Affairs 📡 RSS Aug 21

Poland’s CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw

CVEs: CVE-2026-73570

Security Affairs →

Help Net Security 📡 RSS Aug 21

Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490)

CVEs: CVE-2026-19490

Help Net Security →

The Hacker News 📡 RSS Aug 21

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

CVEs: CVE-2026-19478

The Hacker News →

The Hacker News 📡 RSS Aug 21

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution

CVEs: CVE-2026-69836

The Hacker News →

GBHackers 📡 RSS Aug 21

Microsoft Entra ID RCE Flaw Lets Unauthorized Attackers Execute Code Remotely

CVEs: CVE-2026-69836

GBHackers →

SANS ISC 📡 RSS Aug 21

ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st)

SANS ISC →

The Hacker News 📡 RSS Aug 20

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

Domains: crates.io

The Hacker News →