Indicators of Compromise

The Hacker News 📡 RSS May 10

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

CVEs: CVE-2026-7482

The Hacker News →

Qualys Blog 📡 RSS May 9

Dirty Frag: Using the Page Caches as an Attack Surface

CVEs: CVE-2026-43284 CVE-2026-43500

Qualys Blog →

The Hacker News 📡 RSS May 9

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

CVEs: CVE-2026-29201

The Hacker News →

Tenable Blog 📡 RSS May 8

Dirty Frag (CVE-2026-43284, CVE-2026-43500): Frequently asked questions about this Linux kernel privilege escalation vulnerability chain

CVEs: CVE-2026-43284 CVE-2026-43500

Tenable Blog →

SC Media 📡 RSS May 8

Apache fixes critical HTTP/2 vulnerability allowing remote code execution

CVEs: CVE-2026-23918

SC Media →

Help Net Security 📡 RSS May 8

Dirty Frag: Unpatched Linux vulnerability delivers root access

CVEs: CVE-2026-43284 CVE-2026-43500

Help Net Security →

CISA Advisories 📡 RSS May 8

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2026-42208

CISA Advisories →

Help Net Security 📡 RSS May 8

Ivanti EPMM vulnerability exploited in zero-day attacks (CVE-2026-6973)

CVEs: CVE-2026-6973

Help Net Security →

GBHackers 📡 RSS May 8

Critical Vulnerability in Rancher Fleet Enables Full Cluster-Admin Privileges

CVEs: CVE-2026-41050

GBHackers →

Kaspersky Securelist 📡 RSS May 8

CVE-2025-68670: discovering an RCE vulnerability in xrdp

CVEs: CVE-2025-68670

Kaspersky Securelist →

SANS ISC 📡 RSS May 8

Another Universal Linux Local Privilege Escalation (LPE) Vulnerability: Dirty Frag, (Fri, May 8th)

CVEs: CVE-2026-31431

SANS ISC →

SecurityWeek 📡 RSS May 8

Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks

CVEs: CVE-2026-6973

SecurityWeek →

The Hacker News 📡 RSS May 8

Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions

CVEs: CVE-2026-31431

The Hacker News →

SANS ISC 📡 RSS May 8

ISC Stormcast For Friday, May 8th, 2026 https://isc.sans.edu/podcastdetail/9924, (Fri, May 8th)

SANS ISC →

CSO Online 📡 RSS May 8

Palo Alto Networks firewall flaw has been exploited for several weeks

CVEs: CVE-2026-0300

CSO Online →

CSO Online 📡 RSS May 7

Ollama vulnerability highlights danger of AI frameworks with unrestricted access

CVEs: CVE-2026-7482

CSO Online →

Security Affairs 📡 RSS May 7

Nation-state actors exploit Palo Alto PAN-OS zero-day for weeks

CVEs: CVE-2026-0300

Security Affairs →

Security Affairs 📡 RSS May 7

U.S. CISA adds a flaw in Ivanti Endpoint Manager Mobile (EPMM) to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-6973

Security Affairs →

The Hacker News 📡 RSS May 7

Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access

CVEs: CVE-2026-6973

IPs: 12.6.1.1 12.7.0.1 12.8.0.1

The Hacker News →

The Hacker News 📡 RSS May 7

PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage

CVEs: CVE-2026-0300

The Hacker News →