Indicators of Compromise

GBHackers 📡 RSS May 26

Apache CXF Flaw Exposes Systems to LDAP Injection Attacks

CVEs: CVE-2026-44930

GBHackers →

GBHackers 📡 RSS May 26

ConnectWise Automate Flaw Allows Hackers to Evade Security Controls

CVEs: CVE-2026-9089

GBHackers →

The Hacker News 📡 RSS May 26

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

CVEs: CVE-2026-5426

Domains: asp.net

The Hacker News →

GBHackers 📡 RSS May 26

Hackers Abuse KnowledgeDeliver LMS Flaw to Install BLUEBEAM Web Shell

CVEs: CVE-2026-5426

Domains: asp.net

GBHackers →

SANS ISC 📡 RSS May 26

ISC Stormcast For Tuesday, May 26th, 2026 https://isc.sans.edu/podcastdetail/9944, (Tue, May 26th)

SANS ISC →

Security Affairs 📡 RSS May 25

Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites

CVEs: CVE-2026-26980

Security Affairs →

The Hacker News 📡 RSS May 25

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

CVEs: CVE-2026-26980

The Hacker News →

GBHackers 📡 RSS May 25

CISA Warns Drupal Core SQL Injection Vulnerability Is Being Exploited in Attacks

CVEs: CVE-2026-9082

GBHackers →

The Hacker News 📡 RSS May 25

TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO

Domains: crates.io

The Hacker News →

GBHackers 📡 RSS May 25

Hackers Compromise 34 npm, PyPI, and Crates Packages in Major Supply Chain Attack

Domains: crates.io

GBHackers →

GBHackers 📡 RSS May 25

Nginx-poolslip Flaw Exposes Servers to DoS and Code Execution Attacks

CVEs: CVE-2026-9256

GBHackers →

BleepingComputer 📡 RSS May 24

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

CVEs: CVE-2026-26980

BleepingComputer →

Security Affairs 📡 RSS May 24

Security Affairs newsletter Round 578 by Pierluigi Paganini – INTERNATIONAL EDITION

CVEs: CVE-2026-9082

Security Affairs →

Security Affairs 📡 RSS May 24

U.S. CISA adds a flaw in Drupal Core to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-9082

Security Affairs →

Security Affairs 📡 RSS May 23

CVE-2026-9082: Drupal’s Highly Critical SQL Injection Flaw Is Already Under Active Attack

CVEs: CVE-2026-9082

Security Affairs →

GBHackers 📡 RSS May 23

LiteSpeed cPanel Plugin 0-Day Exploited for Server Root Access

CVEs: CVE-2026-48172

GBHackers →

The Hacker News 📡 RSS May 23

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

CVEs: CVE-2026-48172

The Hacker News →

The Hacker News 📡 RSS May 23

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

CVEs: CVE-2026-9082

The Hacker News →

SC Media 📡 RSS May 22

Ubiquiti patches three critical vulnerabilities in UniFi OS

CVEs: CVE-2026-34908 CVE-2026-34909 CVE-2026-34910

SC Media →

SC Media 📡 RSS May 22

Middle East malicious infrastructure report highlights concentration of C2 servers

Domains: hunt.io

SC Media →