Indicators of Compromise

Rapid7 Blog 📡 RSS Jul 29

CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity

CVEs: CVE-2026-63077

Rapid7 Blog →

The Hacker News 📡 RSS Jul 29

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

CVEs: CVE-2026-59726

The Hacker News →

The Hacker News 📡 RSS Jul 29

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

CVEs: CVE-2026-59309

The Hacker News →

SC Media 📡 RSS Jul 29

OpenWrt releases security updates for critical DHCPv6 flaw and other vulnerabilities

CVEs: CVE-2026-53921

SC Media →

SC Media 📡 RSS Jul 29

JetBrains patches critical TeamCity flaw enabling unauthenticated code execution

CVEs: CVE-2026-63077

SC Media →

GBHackers 📡 RSS Jul 29

Critical Ruflo MCP Bridge Flaw Allows Full AI Agent Platform Takeover

CVEs: CVE-2026-59726

GBHackers →

Security Affairs 📡 RSS Jul 29

Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution

CVEs: CVE-2026-47876

Security Affairs →

CISA Advisories 📡 RSS Jul 29

CISA Adds One Known Exploited Vulnerability to Catalog

CVEs: CVE-2026-20316

CISA Advisories →

The Hacker News 📡 RSS Jul 29

Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser

CVEs: CVE-2026-10702

The Hacker News →

GBHackers 📡 RSS Jul 29

NVIDIA BlueField Flaw Lets VM Users Execute Code via Crafted Messages

CVEs: CVE-2026-65094

GBHackers →

GBHackers 📡 RSS Jul 29

Check Point SmartConsole Zero-Day Lets Unauthenticated Attackers Gain Full Admin Access

CVEs: CVE-2026-16232

GBHackers →

The Hacker News 📡 RSS Jul 29

Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass

CVEs: CVE-2026-16232

The Hacker News →

Help Net Security 📡 RSS Jul 29

Mend.io enhances application security with AI runtime protection and faster zero-day response

Domains: mend.io

Help Net Security →

The Hacker News 📡 RSS Jul 29

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

CVEs: CVE-2026-60004

The Hacker News →

The Hacker News 📡 RSS Jul 29

Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

Domains: hunt.io

The Hacker News →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-467: GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability

CVEs: CVE-2026-18299

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-466: GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18298

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-465: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18297

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-464: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-18296

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 29

ZDI-26-463: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-18295

Zero Day Initiative →