Indicators of Compromise

Recorded Future 📡 RSS Mar 25

ClickFix Campaigns Targeting Windows and macOS

Domains: booking.com

Recorded Future →

Infosecurity Magazine 📡 RSS Mar 23

CISA Orders US Government to Patch Maximum Severity Cisco Flaw

CVEs: CVE-2026-20131

Infosecurity Magazine →

Zero Day Initiative 📡 RSS Mar 23

ZDI-26-225: (Pwn2Own) Samsung Galaxy S25 Samsung Account Open Redirect Security Bypass Vulnerability

CVEs: CVE-2025-58487

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 23

ZDI-26-224: (Pwn2Own) Samsung Galaxy S25 Samsung Account Cross-Site Scripting Remote Code Execution Vulnerability

CVEs: CVE-2025-58486

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 23

ZDI-26-223: (Pwn2Own) Samsung Galaxy S25 Smart Touch Call Application Protection Mechanism Failure Information Disclosure Vulnerability

CVEs: CVE-2025-58488

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 23

ZDI-26-222: (Pwn2Own) Canon imageCLASS MF654Cdw BJNP Memory Corruption Remote Code Execution Vulnerability

CVEs: CVE-2025-14233

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 19

ZDI-26-221: GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-4154

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 19

ZDI-26-220: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-4153

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 19

ZDI-26-219: GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-4152

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 19

ZDI-26-218: GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-4151

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 19

ZDI-26-217: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-4150

Zero Day Initiative →

Infosecurity Magazine 📡 RSS Mar 18

New Ubuntu Flaw Enables Local Attackers to Gain Root Access

CVEs: CVE-2026-3888

Infosecurity Magazine →

Zero Day Initiative 📡 RSS Mar 17

ZDI-26-216: (Pwn2Own) QNAP TS-453E smbd domain_name Argument Injection Authentication Bypass Vulnerability

CVEs: CVE-2025-62847

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-215: KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

CVEs: CVE-2026-4158

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-214: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-2049

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-213: GIMP LBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-2046

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-212: Schneider Electric EcoStruxure Data Center Expert Hard-coded Password Remote Code Execution Vulnerability

CVEs: CVE-2025-13957

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-211: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-1361

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-210: (Pwn2Own) Samsung Galaxy S25 Samsung Members Security Feature Bypass Vulnerability

CVEs: CVE-2025-21079

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 16

ZDI-26-209: (Pwn2Own) Samsung Galaxy S25 Samsung Members Open Redirect Security Bypass Vulnerability

CVEs: CVE-2025-21079

Zero Day Initiative →