Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials
CVEs:
CVE-2025-5777
Indicators of Compromise
1013 articles containing extracted IOCs (CVEs, IPs, hashes, domains, URLs, emails)
U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog
CVEs:
CVE-2026-45659
Aikido Security acquires Root.io to enhance open-source software patching
Domains:
root.io
ST Engineering iDirect iQ-Series Terminals
CVEs:
CVE-2026-38059
CVE-2026-38057
IPs:
4.5.2.1
950 Oracle E-Business Suite Instances Exposed as CVE-2026-46817 Attacks Observed in the Wild
CVEs:
CVE-2026-46817
CISA Adds Actively Exploited Microsoft SharePoint Vulnerability to KEV Catalog
CVEs:
CVE-2026-45659
CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability
CVEs:
CVE-2026-45659
JADEPUFFER Agentic Ransomware Uses LLM to Automate Database Extortion
CVEs:
CVE-2025-3248
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
CVEs:
CVE-2026-45659
Critical Cursor IDE Flaws Let Attackers Execute Code via Zero-Click Prompt Injection
CVEs:
CVE-2026-50548
CVE-2026-50549
ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd)
Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector
CVEs:
CVE-2026-50548
CVE-2026-50549
Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed
CVEs:
CVE-2026-46817
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
CVEs:
CVE-2026-50548
CVE-2026-50549
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
CVEs:
CVE-2026-8037
CISA Adds One Known Exploited Vulnerability to Catalog
CVEs:
CVE-2026-45659
CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks
CVEs:
CVE-2026-33825
CISA Adds Actively Exploited SimpleHelp Vulnerability to KEV Catalog
CVEs:
CVE-2026-48558
Anthropic buffa Library Zero-Day Lets Attackers Trigger Memory-Amplification DoS
CVEs:
CVE-2026-55407
Citrix NetScaler ADC and Gateway Flaws Let Attackers Trigger Memory Overread and Denial-of-Service
CVEs:
CVE-2026-8451
CVE-2026-8452
CVE-2026-8655
CVE-2026-10816
CVE-2026-10817
CVE-2026-13474