● Threat Intelligence Report

Generated 2026-10-17 15:32 UTC  ·  3/3 sources live  ·  ← back to cyberassist
↻ Refresh⇩ Download PDF
1748
KEV catalog total
9
Added last 7 days
361
Ransomware-linked
35
Fresh IOCs / pulses

Latest CISA Known Exploited Vulnerabilities live

CVEVendor / ProductVulnerabilityAddedDue
CVE-2026-102764BeyondTrust
Remote Support		BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability2026-10-162026-10-19
CVE-2025-61624Fortinet
Multiple Products		Fortinet Multiple Products Path Traversal Vulnerability2026-10-162026-10-19
CVE-2026-21589Atlassian
Multiple Products		Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability2026-10-152026-10-18
CVE-2026-105134Ahsay
AhsayCBS		Ahsay AhsayCBS Command Injection Vulnerability2026-10-142026-10-17
CVE-2026-76519Cisco
Secure Email Gateway		Cisco Secure Email Gateway Relative Path Traversal Vulnerability2026-10-142026-10-17
CVE-2026-105133Ahsay
AhsayCBS		Ahsay AhsayCBS Improper Authentication Vulnerability2026-10-142026-10-17
CVE-2026-0322Palo Alto Networks
PAN-OS		Palo Alto Networks PAN-OS Code Injection Vulnerability2026-10-142026-10-17
CVE-2026-104935Ivanti
Connect Secure		Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability2026-10-132026-10-16
CVE-2026-96951Microsoft
Windows		Microsoft Windows Command Injection Vulnerability2026-10-132026-10-16
CVE-2015-5477ISC
BIND		 ISC BIND Data Processing Errors Vulnerability2026-10-082026-10-11
CVE-2016-3081Apache
Struts		Apache Struts Command Injection Vulnerability2026-10-082026-10-11
CVE-2023-22894Strapi
Strapi		Strapi Cleartext Storage of Sensitive Information Vulnerability2026-10-082026-10-11
CVE-2021-3199ONLYOFFICE
Docs		ONLYOFFICE Docs Server Path Traversal Vulnerability2026-10-082026-10-11
CVE-2015-3306ProFTPD
ProFTPD		ProFTPD Improper Access Control Vulnerability2026-10-082026-10-11
CVE-2026-88779Citrix
NetScaler		Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability2026-10-042026-10-07
CVE-2026-102490Zammad GmbH
Zammad		Zammad GmbH Zammad Improper Privilege Management Vulnerability2026-10-022026-10-05
CVE-2026-102489Zammad GmbH
Zammad		Zammad GmbH Zammad Session Fixation Vulnerability2026-10-022026-10-05
CVE-2026-104286Fortinet
FortiMail		Fortinet FortiMail Path Traversal Vulnerability2026-10-012026-10-04
CVE-2026-76504Cisco
Catalyst SD-WAN Manager		Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability2026-09-302026-10-03
CVE-2026-86950Apple
Multiple Products		Apple Multiple Products Out-of-Bounds Write Vulnerability2026-09-292026-10-13
CVE-2026-88772Citrix
NetScaler		Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability2026-09-272026-09-30
CVE-2026-88771Citrix
NetScaler		Citrix NetScaler Improper Input Validation Vulnerability2026-09-272026-09-30
CVE-2026-67279MikroTik
RouterOS		Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability2026-09-252026-09-28
CVE-2026-65660Microsoft
SharePoint		Microsoft SharePoint Code Injection Vulnerability2026-09-252026-09-28
CVE-2026-87902WordPress
Core		WordPress Core Remote File Inclusion Vulnerability2026-09-252026-09-28

Recent Malware IOCs — ThreatFox live

IndicatorTypeMalwareThreatConf.First seen
https://www.sardantinfortunistica.it/?v=551c0342d534urlUnknown malwarepayload_delivery90%2026-10-17 15:30:58 UTC
https://v61.8mytogel.org/yuk/urlVidarbotnet_cc100%2026-10-17 15:30:48 UTC
4a09d3fdb1e3cd30f07f4942f5733dbc11ade71b36b41fecf3a5792b4098d9f9sha256_hashAMOSpayload100%2026-10-17 15:28:25 UTC
de8ff8c9634a91032d66fc10056f11aadf0350d4f6653447476a5535f09c8997sha256_hashAMOSpayload100%2026-10-17 15:26:59 UTC
ba902ec4c0c4aa948c6e64cf3a750472f7db8d21ffe89a841a80622a4fb9744csha256_hashAMOSpayload100%2026-10-17 15:25:49 UTC
https://v61.8mytogel.org/c9/urlVidarbotnet_cc100%2026-10-17 15:25:48 UTC
3b65af2a918dee97fcda1c67ad5fd3ff4358ca0a86d06edb09b1971fd6d62ba6sha256_hashAMOSpayload100%2026-10-17 15:24:44 UTC
54.215.31.113:8312ip:portRemusbotnet_cc100%2026-10-17 15:21:46 UTC
130.12.180.32:7001ip:portUnknown malwarebotnet_cc100%2026-10-17 15:21:10 UTC
39rwd49tgi9.xyzdomainUnknown malwarebotnet_cc100%2026-10-17 15:21:09 UTC
9egu923jfsdf.prodomainUnknown malwarebotnet_cc100%2026-10-17 15:21:09 UTC
dfisjqef0s.appdomainUnknown malwarebotnet_cc100%2026-10-17 15:21:08 UTC
fallbackmaximidfjdsia.comdomainUnknown malwarebotnet_cc100%2026-10-17 15:21:07 UTC
sfoig93rafa.iodomainUnknown malwarebotnet_cc100%2026-10-17 15:21:07 UTC
sg9sj8ifda.comdomainUnknown malwarebotnet_cc100%2026-10-17 15:21:07 UTC
w9triu9w8vs.rodomainUnknown malwarebotnet_cc100%2026-10-17 15:21:02 UTC
0cc42472a07cf14668e899b73adafe666d02495bf9349715613c8e7ba57244easha256_hashUnknown malwarepayload100%2026-10-17 15:21:01 UTC
0475f2831e60ac0b229f346036e339d20ad1d1165b005a89b634dc7c67318c74sha256_hashUnknown malwarepayload100%2026-10-17 15:21:01 UTC
e59547abdff8019da736bcb8c252cbf5ce96b9695775031b10da334867b59b62sha256_hashUnknown malwarepayload100%2026-10-17 15:21:01 UTC
9d0891f849ccc8c0eff4ea961702087eeeceeb00cff94a7cb0542839be3421f5sha256_hashUnknown malwarepayload100%2026-10-17 15:21:00 UTC
8c21db937a85cf7ed804501cdfee7d1c543aa9a56d4d1187951b8f8048af1c10sha256_hashUnknown malwarepayload100%2026-10-17 15:21:00 UTC
536a376337fed899e58a86baca1fc584d570be8e708b6c302cc6f24626dfcfd7sha256_hashUnknown malwarepayload100%2026-10-17 15:20:59 UTC
f5cf1b8ee8ddced3fb5e081dc1543669c3b62767c45da63002032da87632839dsha256_hashUnknown malwarepayload100%2026-10-17 15:20:59 UTC
d570a1702448fac805fe39e9a49fd1ca24e4505161eec68cf6e7f5e2b6a34ce0sha256_hashUnknown malwarepayload100%2026-10-17 15:20:58 UTC
https://v61.8mytogel.org/ia/urlVidarbotnet_cc100%2026-10-17 15:20:48 UTC

Community Threat Pulses — AlienVault OTX live

PulseAuthorTagsIOCsCreated
VectraRAT: An Undocumented Full-Stack MaaS Built From ScratchAlienVaultamadey, maas platform, vidar, vectrarat, nyxel, netsupport rat, clickfix, uac bypass362026-09-16
SilkParasite Infrastructure: SpiceRAT Servers Tied to Energy and Government Targets Across Central AsiaAlienVaultbloodalchemy, nomadrat, silkparasite, spicerat, nodeedgerat, government impersonation602026-09-16
Noodle RAT: A Recipe for Cross Platform EspionageAlienVaultrekoobe, angryrebel, noodle rat, tiny shell, microload, multidrop, gh0st rat542026-09-16
How Money Laundering, Scams, and Espionage Hide in a Web Full of Casino GarbageAlienVaultpeckbirdy, money laundering, illegal gambling, bulletproof hosting, scambling, casino domains242026-09-16
The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessionsAlienVaultKREMLIN, browser extension, Ethereum dead-drop, PULSAR, REMCOS, session hijacking3602026-09-16
The banana stand: brokering and managing infections across Asia using MQTTAlienVaultsupply chain, mqtt, iocontrol, korplug, plugx, sideloading, wailingcrab, tendyron onkey472026-09-16
Fake MP4 File Carries Malicious PayloadAlienVaultfake mp4, encrypted payload, powershell, cloudflare, iso-bmff, remote administration tool, netsupport, uuid box632026-08-29
skynox7: Proxyjacking Edge Devices Into Residential ProxiesAlienVaultbandwidth monetization, proxyjacking, dvr exploitation, cve-2024-3272, cve-2021-44228, cve-2024-3273, edge devices, iproyal112026-10-15
Inside a PaperCut Attacker's AI Toolkit: Agent Instructions, Exploit Code, a Second RCE, and Victims Across 45+ CountriesAlienVaultpentagi framework, ai-orchestrated exploitation, cve-2026-81578, xml-rpc abuse, reverse socks5, credential harvesting, chisel persistence, active directory compromise252026-10-15
KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and TerrorizeAlienVaultcredential theft, hvnc, telegram c2, psychological harassment, bladabindi, remote access trojan, kgb rat, windows402026-10-15