Indicators of Compromise

GBHackers 📡 RSS May 28

Hackers Pivot from marimo RCE to Internal Database Using LLM Agent

CVEs: CVE-2026-39987

GBHackers →

Security Affairs 📡 RSS May 28

U.S. CISA adds Daemon Tools, TanStack, and Nx Console flaws to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-8398

Security Affairs →

Help Net Security 📡 RSS May 28

Zapier exploit chain shows how known anti-patterns compose into critical risk

Domains: zapier.com

Help Net Security →

GBHackers 📡 RSS May 28

Gitea Container Registry Vulnerability Could Lead to Private Image Exposure

CVEs: CVE-2026-27771

GBHackers →

GBHackers 📡 RSS May 28

Critical Notepad++ Flaw Could Enable Remote Code Execution Attacks

CVEs: CVE-2026-48770 CVE-2026-48778 CVE-2026-48800

IPs: 8.9.6.1

GBHackers →

Security Affairs 📡 RSS May 28

U.S. CISA adds LiteSpeed cPanel Plugin flaw to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-48172

Security Affairs →

Zero Day Initiative 📡 RSS May 28

ZDI-26-326: TrendAI Vision One Security Agent Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

CVEs: CVE-2026-45208

Zero Day Initiative →

Zero Day Initiative 📡 RSS May 28

ZDI-26-325: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

CVEs: CVE-2026-45207

Zero Day Initiative →

Zero Day Initiative 📡 RSS May 28

ZDI-26-324: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

CVEs: CVE-2026-45206

Zero Day Initiative →

Zero Day Initiative 📡 RSS May 28

ZDI-26-323: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

CVEs: CVE-2026-34930

Zero Day Initiative →

Zero Day Initiative 📡 RSS May 28

ZDI-26-322: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

CVEs: CVE-2026-34929

Zero Day Initiative →

Zero Day Initiative 📡 RSS May 28

ZDI-26-321: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

CVEs: CVE-2026-34928

Zero Day Initiative →

Zero Day Initiative 📡 RSS May 28

ZDI-26-320: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

CVEs: CVE-2026-34927

Zero Day Initiative →

SANS ISC 📡 RSS May 28

ISC Stormcast For Thursday, May 28th, 2026 https://isc.sans.edu/podcastdetail/9948, (Thu, May 28th)

SANS ISC →

SC Media 📡 RSS May 27

High-severity Starlette vulnerability 'BadHost' could expose sensitive data

CVEs: CVE-2026-48710

SC Media →

CSO Online 📡 RSS May 27

FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework

CVEs: CVE-2026-48710

CSO Online →

GBHackers 📡 RSS May 27

BadHost Vulnerability Exposes Sensitive AI Agent Server Endpoints to Attackers

CVEs: CVE-2026-48710

GBHackers →

CISA Advisories 📡 RSS May 27

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2026-8398 CVE-2026-45321 CVE-2026-48027

CISA Advisories →

GBHackers 📡 RSS May 27

CISA Warns LiteSpeed cPanel Plugin Vulnerability Is Being Exploited in Attacks

CVEs: CVE-2026-48172

GBHackers →

GBHackers 📡 RSS May 27

Windows Kernel Vulnerability Lets Attackers Modify Kernel Memory Counters

CVEs: CVE-2026-40369

GBHackers →