Indicators of Compromise

The Hacker News 📡 RSS Aug 3

N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete

CVEs: CVE-2026-18577

The Hacker News →

GBHackers 📡 RSS Aug 3

Metasploit Exploit Targets Critical Ruby on Rails Active Storage RCE Flaw

CVEs: CVE-2026-66066

GBHackers →

Security Affairs 📡 RSS Aug 3

Ruby on Rails Patches Critical Active Storage Vulnerability Affecting Image Processing

CVEs: CVE-2026-66066

Security Affairs →

GBHackers 📡 RSS Aug 3

Hackers Exploit Critical Arista VeloCloud Flaw to Execute OS Commands

CVEs: CVE-2026-16812

GBHackers →

SANS ISC 📡 RSS Aug 3

ISC Stormcast For Monday, August 3rd, 2026 https://isc.sans.edu/podcastdetail/10034, (Mon, Aug 3rd)

SANS ISC →

Security Affairs 📡 RSS Aug 1

Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic

CVEs: CVE-2026-48449

Security Affairs →

The Hacker News 📡 RSS Aug 1

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

CVEs: CVE-2026-48449

The Hacker News →

HackRead 📡 RSS Jul 31

Wordfence Finds Critical Backdoor in ARVE WordPress Plugin

Domains: wordpress.org

HackRead →

GBHackers 📡 RSS Jul 31

Keycloak Flaw Exposes Users’ Personal Data to Restricted Admins

CVEs: CVE-2026-17059

GBHackers →

GBHackers 📡 RSS Jul 31

Critical JetBrains TeamCity Flaw Enables Unauthenticated Remote Code Execution

CVEs: CVE-2026-63077

GBHackers →

CSO Online 📡 RSS Jul 31

JetBrains says a crafted HTTP request could break TeamCity

CVEs: CVE-2026-63077

CSO Online →

GBHackers 📡 RSS Jul 31

Critical SolarWinds Web Help Desk Flaw Lets Attackers Bypass SAML Authentication

CVEs: CVE-2026-28323

GBHackers →

GBHackers 📡 RSS Jul 31

Recon-Only SSH Attack Leaves No Malware but Signals a Second-Stage Intrusion

IPs: 91.92.40.13

GBHackers →

GBHackers 📡 RSS Jul 31

PHP Patches 3 Security Flaws Enabling SQL Injection, Memory Corruption and DoS Attacks

IPs: 8.4.248.4

GBHackers →

SecurityWeek 📡 RSS Jul 31

Critical Code Execution Vulnerability Patched in TeamCity 

CVEs: CVE-2026-63077

SecurityWeek →

SANS ISC 📡 RSS Jul 31

ISC Stormcast For Friday, July 31st, 2026 https://isc.sans.edu/podcastdetail/10032, (Fri, Jul 31st)

SANS ISC →

Security Affairs 📡 RSS Jul 30

Researchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police App

Domains: hunt.io

Security Affairs →

Rapid7 Blog 📡 RSS Jul 30

KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

CVEs: CVE-2026-66066

Rapid7 Blog →

Help Net Security 📡 RSS Jul 30

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)

CVEs: CVE-2026-42897

Help Net Security →

CSO Online 📡 RSS Jul 30

Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge

CVEs: CVE-2026-59726

CSO Online →