Use Case Intel — Threat Intel Feed High-fidelity IOCs aggregated from The Hacker News, BleepingComputer, Microsoft Security Blog and CISA KEV. Refreshed daily. CVEs/hashes via regex; domains/IPs only when defanged by the source author. https://clankerusecase.com/ en-us Tue, 18 Aug 2026 12:38:30 +0000 Tue, 18 Aug 2026 12:38:30 +0000 usecaseintel/generate.py [SHA256/CRIT] 6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>SHA256:</strong> <code>6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:sha256:6f445252494a0908ab51d526e09134cebc33a199384771acd58c4a87f1ffc063 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [SHA256/CRIT] 1f6c69403678646a60925dcffe8509d22bb570c611324b93bec9aea72024ef6b https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>SHA256:</strong> <code>1f6c69403678646a60925dcffe8509d22bb570c611324b93bec9aea72024ef6b</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:sha256:1f6c69403678646a60925dcffe8509d22bb570c611324b93bec9aea72024ef6b Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [SHA1/CRIT] 779a8af3b9838a33d1e199da3fc2f02a49e7c13e https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>SHA1:</strong> <code>779a8af3b9838a33d1e199da3fc2f02a49e7c13e</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:sha1:779a8af3b9838a33d1e199da3fc2f02a49e7c13e Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [MD5/CRIT] 1f63fa7921c2f5fb8f8ffa430d02ac4a https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>MD5:</strong> <code>1f63fa7921c2f5fb8f8ffa430d02ac4a</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:md5:1f63fa7921c2f5fb8f8ffa430d02ac4a Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 67.217.57.240 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>67.217.57.240</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:67.217.57.240 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 54.154.170.233 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>54.154.170.233</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:54.154.170.233 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 45.95.168.100 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>45.95.168.100</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:45.95.168.100 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 45.61.150.83 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>45.61.150.83</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:45.61.150.83 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 193.29.224.83 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>193.29.224.83</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:193.29.224.83 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 185.215.180.70 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>185.215.180.70</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:185.215.180.70 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 18.230.118.147 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>18.230.118.147</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:18.230.118.147 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 18.228.3.224 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>18.228.3.224</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:18.228.3.224 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 162.248.53.119 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>162.248.53.119</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:162.248.53.119 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 158.160.123.117 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>158.160.123.117</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:158.160.123.117 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 121.160.102.68 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>121.160.102.68</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:121.160.102.68 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 104.194.151.181 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>104.194.151.181</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:104.194.151.181 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 103.127.134.124 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>IPV4:</strong> <code>103.127.134.124</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:ipv4:103.127.134.124 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [DOMAIN/CRIT] pool.supportxmr.com https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>DOMAIN:</strong> <code>pool.supportxmr.com</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:domain:pool.supportxmr.com Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [DOMAIN/CRIT] gulf.moneroocean.stream https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>DOMAIN:</strong> <code>gulf.moneroocean.stream</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News, Unit 42 (Palo Alto)</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:domain:gulf.moneroocean.stream Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News Unit 42 (Palo Alto) [DOMAIN/CRIT] eu.zano.k1pool.com https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>DOMAIN:</strong> <code>eu.zano.k1pool.com</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:domain:eu.zano.k1pool.com Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [DOMAIN/CRIT] bwqqvqfgsseplyoltois92rdukv0mm5th.oast.fun https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>DOMAIN:</strong> <code>bwqqvqfgsseplyoltois92rdukv0mm5th.oast.fun</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:domain:bwqqvqfgsseplyoltois92rdukv0mm5th.oast.fun Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2025-62593 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>CVE:</strong> <code>CVE-2025-62593</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News, CISA KEV</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:cve:CVE-2025-62593 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News CISA KEV [CVE/CRIT] CVE-2023-48022 https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html <p><strong>CVE:</strong> <code>CVE-2023-48022</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-18 · Sources: The Hacker News</p><p>Context: CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE</p> usecaseintel:cve:CVE-2023-48022 Tue, 18 Aug 2026 00:00:00 +0000 The Hacker News [SHA256/CRIT] f13cb360768363d3424e2192c7805b8c8015eb8706dbbbcdead6aed8cf390109 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>SHA256:</strong> <code>f13cb360768363d3424e2192c7805b8c8015eb8706dbbbcdead6aed8cf390109</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:sha256:f13cb360768363d3424e2192c7805b8c8015eb8706dbbbcdead6aed8cf390109 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer [SHA256/CRIT] 55a1eb4c2d3da04376df39d7ba832569c6af1a37a0cf2b95f754ac898023a30c https://www.bleepingcomputer.com/news/security/philips-and-ge-investigating-clop-ransomware-data-theft-claims/ <p><strong>SHA256:</strong> <code>55a1eb4c2d3da04376df39d7ba832569c6af1a37a0cf2b95f754ac898023a30c</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: BleepingComputer, CISA KEV</p><p>Context: Philips and GE investigating Clop ransomware data theft claims</p> usecaseintel:sha256:55a1eb4c2d3da04376df39d7ba832569c6af1a37a0cf2b95f754ac898023a30c Mon, 17 Aug 2026 00:00:00 +0000 BleepingComputer CISA KEV [SHA256/CRIT] 4c0886349e9d348569fffe1b7a31e474d514508bf0cd6f1e5dd99c2a73525e4d https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>SHA256:</strong> <code>4c0886349e9d348569fffe1b7a31e474d514508bf0cd6f1e5dd99c2a73525e4d</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:sha256:4c0886349e9d348569fffe1b7a31e474d514508bf0cd6f1e5dd99c2a73525e4d Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer [IPV4/CRIT] 91.92.40.118 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>IPV4:</strong> <code>91.92.40.118</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:ipv4:91.92.40.118 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer [IPV4/CRIT] 5.34.177.38 https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html <p><strong>IPV4:</strong> <code>5.34.177.38</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware</p> usecaseintel:ipv4:5.34.177.38 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 5.34.176.100 https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html <p><strong>IPV4:</strong> <code>5.34.176.100</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware</p> usecaseintel:ipv4:5.34.176.100 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 5.180.41.35 https://www.bleepingcomputer.com/news/security/philips-and-ge-investigating-clop-ransomware-data-theft-claims/ <p><strong>IPV4:</strong> <code>5.180.41.35</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: BleepingComputer, CISA KEV</p><p>Context: Philips and GE investigating Clop ransomware data theft claims</p> usecaseintel:ipv4:5.180.41.35 Mon, 17 Aug 2026 00:00:00 +0000 BleepingComputer CISA KEV [IPV4/CRIT] 216.152.151.204 https://www.bleepingcomputer.com/news/security/philips-and-ge-investigating-clop-ransomware-data-theft-claims/ <p><strong>IPV4:</strong> <code>216.152.151.204</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: BleepingComputer, CISA KEV</p><p>Context: Philips and GE investigating Clop ransomware data theft claims</p> usecaseintel:ipv4:216.152.151.204 Mon, 17 Aug 2026 00:00:00 +0000 BleepingComputer CISA KEV [IPV4/CRIT] 216.152.148.54 https://www.bleepingcomputer.com/news/security/philips-and-ge-investigating-clop-ransomware-data-theft-claims/ <p><strong>IPV4:</strong> <code>216.152.148.54</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: BleepingComputer, CISA KEV</p><p>Context: Philips and GE investigating Clop ransomware data theft claims</p> usecaseintel:ipv4:216.152.148.54 Mon, 17 Aug 2026 00:00:00 +0000 BleepingComputer CISA KEV [IPV4/CRIT] 192.255.141.13 https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html <p><strong>IPV4:</strong> <code>192.255.141.13</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware</p> usecaseintel:ipv4:192.255.141.13 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 185.144.28.120 https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html <p><strong>IPV4:</strong> <code>185.144.28.120</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware</p> usecaseintel:ipv4:185.144.28.120 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 146.59.252.178 https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html <p><strong>IPV4:</strong> <code>146.59.252.178</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware</p> usecaseintel:ipv4:146.59.252.178 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [IPV4/CRIT] 104.243.35.63 https://www.bleepingcomputer.com/news/security/philips-and-ge-investigating-clop-ransomware-data-theft-claims/ <p><strong>IPV4:</strong> <code>104.243.35.63</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: BleepingComputer, CISA KEV</p><p>Context: Philips and GE investigating Clop ransomware data theft claims</p> usecaseintel:ipv4:104.243.35.63 Mon, 17 Aug 2026 00:00:00 +0000 BleepingComputer CISA KEV [DOMAIN/CRIT] studiotikva.com https://thehackernews.com/2026/08/cavern-c2-uses-dns-and-google-apps.html <p><strong>DOMAIN:</strong> <code>studiotikva.com</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, Securelist (Kaspersky)</p><p>Context: Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic</p> usecaseintel:domain:studiotikva.com Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News Securelist (Kaspersky) [DOMAIN/CRIT] intel.se9ly9upbhay.shop https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html <p><strong>DOMAIN:</strong> <code>intel.se9ly9upbhay.shop</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware</p> usecaseintel:domain:intel.se9ly9upbhay.shop Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [DOMAIN/HIGH] d8t9ldn1onp04vb3399g5krtxh14hkh3.oast.me https://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets_0330881554.html <p><strong>DOMAIN:</strong> <code>d8t9ldn1onp04vb3399g5krtxh14hkh3.oast.me</code></p><p>Severity: <strong>high</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection</p> usecaseintel:domain:d8t9ldn1onp04vb3399g5krtxh14hkh3.oast.me Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [DOMAIN/MED] apexappliexi.dgfp.finances.gouv.fr https://www.bleepingcomputer.com/news/security/french-tax-authority-data-breach-affects-678-000-individuals/ <p><strong>DOMAIN:</strong> <code>apexappliexi.dgfp.finances.gouv.fr</code></p><p>Severity: <strong>med</strong> · First seen: 2026-08-17 · Sources: BleepingComputer</p><p>Context: French tax authority data breach affects 678,000 individuals</p> usecaseintel:domain:apexappliexi.dgfp.finances.gouv.fr Mon, 17 Aug 2026 00:00:00 +0000 BleepingComputer [DOMAIN/HIGH] anonfilesnew.com https://www.bleepingcomputer.com/news/security/hacker-claims-36-million-azure-account-records-stolen-from-major-companies/ <p><strong>DOMAIN:</strong> <code>anonfilesnew.com</code></p><p>Severity: <strong>high</strong> · First seen: 2026-08-17 · Sources: BleepingComputer</p><p>Context: Hacker claims 3.6 million Azure account records stolen from major companies</p> usecaseintel:domain:anonfilesnew.com Mon, 17 Aug 2026 00:00:00 +0000 BleepingComputer [CVE/CRIT] CVE-2026-71479 https://github.com/advisories/GHSA-8r8v-xf7q-rcpr <p><strong>CVE:</strong> <code>CVE-2026-71479</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: GitHub Security Advisories</p><p>Context: [GHSA / CRITICAL] CVE-2026-71479: New API: Integer overflow in quota billing yields negative charges (self-crediting)</p> usecaseintel:cve:CVE-2026-71479 Mon, 17 Aug 2026 00:00:00 +0000 GitHub Security Advisories [CVE/HIGH] CVE-2026-69414 https://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/ <p><strong>CVE:</strong> <code>CVE-2026-69414</code></p><p>Severity: <strong>high</strong> · First seen: 2026-08-17 · Sources: BleepingComputer</p><p>Context: Microsoft working on Defender patch for ShieldBreak zero-day</p> usecaseintel:cve:CVE-2026-69414 Mon, 17 Aug 2026 00:00:00 +0000 BleepingComputer [CVE/CRIT] CVE-2026-64859 https://github.com/advisories/GHSA-6x2c-phff-wx57 <p><strong>CVE:</strong> <code>CVE-2026-64859</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: GitHub Security Advisories</p><p>Context: [GHSA / CRITICAL] CVE-2026-64859: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation</p> usecaseintel:cve:CVE-2026-64859 Mon, 17 Aug 2026 00:00:00 +0000 GitHub Security Advisories [CVE/CRIT] CVE-2026-64849 https://github.com/advisories/GHSA-7gwp-5pfp-969j <p><strong>CVE:</strong> <code>CVE-2026-64849</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: GitHub Security Advisories</p><p>Context: [GHSA / CRITICAL] CVE-2026-64849: MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)</p> usecaseintel:cve:CVE-2026-64849 Mon, 17 Aug 2026 00:00:00 +0000 GitHub Security Advisories [CVE/CRIT] CVE-2026-59310 https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html <p><strong>CVE:</strong> <code>CVE-2026-59310</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware</p> usecaseintel:cve:CVE-2026-59310 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2026-59309 https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html <p><strong>CVE:</strong> <code>CVE-2026-59309</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware</p> usecaseintel:cve:CVE-2026-59309 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2026-55158 https://github.com/advisories/GHSA-2qvg-qr73-mqxp <p><strong>CVE:</strong> <code>CVE-2026-55158</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: GitHub Security Advisories</p><p>Context: [GHSA / CRITICAL] CVE-2026-55158: conflibot vulnerable to command injection via crafted pull request branch names under pull_request_target</p> usecaseintel:cve:CVE-2026-55158 Mon, 17 Aug 2026 00:00:00 +0000 GitHub Security Advisories [CVE/HIGH] CVE-2026-54121 https://www.bleepingcomputer.com/news/security/certighost-and-the-privilege-hiding-in-your-certificate-authority/ <p><strong>CVE:</strong> <code>CVE-2026-54121</code></p><p>Severity: <strong>high</strong> · First seen: 2026-08-17 · Sources: BleepingComputer</p><p>Context: Certighost and the Privilege Hiding in Your Certificate Authority</p> usecaseintel:cve:CVE-2026-54121 Mon, 17 Aug 2026 00:00:00 +0000 BleepingComputer [CVE/CRIT] CVE-2026-50656 https://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/ <p><strong>CVE:</strong> <code>CVE-2026-50656</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: BleepingComputer, The Hacker News</p><p>Context: Microsoft working on Defender patch for ShieldBreak zero-day</p> usecaseintel:cve:CVE-2026-50656 Mon, 17 Aug 2026 00:00:00 +0000 BleepingComputer The Hacker News [CVE/CRIT] CVE-2026-47698 https://github.com/advisories/GHSA-cfcw-xp6x-25gj <p><strong>CVE:</strong> <code>CVE-2026-47698</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: GitHub Security Advisories</p><p>Context: [GHSA / CRITICAL] CVE-2026-47698: vm2: Sandbox Breakout Using Dangerous Host Proto Mutators</p> usecaseintel:cve:CVE-2026-47698 Mon, 17 Aug 2026 00:00:00 +0000 GitHub Security Advisories [CVE/CRIT] CVE-2026-47686 https://github.com/advisories/GHSA-m283-3h24-438v <p><strong>CVE:</strong> <code>CVE-2026-47686</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: GitHub Security Advisories</p><p>Context: [GHSA / CRITICAL] CVE-2026-47686: VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE</p> usecaseintel:cve:CVE-2026-47686 Mon, 17 Aug 2026 00:00:00 +0000 GitHub Security Advisories [CVE/CRIT] CVE-2026-19650 https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html <p><strong>CVE:</strong> <code>CVE-2026-19650</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects</p> usecaseintel:cve:CVE-2026-19650 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2026-19478 https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html <p><strong>CVE:</strong> <code>CVE-2026-19478</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects</p> usecaseintel:cve:CVE-2026-19478 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2026-12569 https://www.bleepingcomputer.com/news/security/philips-and-ge-investigating-clop-ransomware-data-theft-claims/ <p><strong>CVE:</strong> <code>CVE-2026-12569</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: BleepingComputer, CISA KEV</p><p>Context: Philips and GE investigating Clop ransomware data theft claims</p> usecaseintel:cve:CVE-2026-12569 Mon, 17 Aug 2026 00:00:00 +0000 BleepingComputer CISA KEV [CVE/CRIT] CVE-2025-55583 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2025-55583</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2025-55583 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer [CVE/CRIT] CVE-2025-31718 https://thehackernews.com/2026/08/unisoc-volte-video-call-exploit-chain.html <p><strong>CVE:</strong> <code>CVE-2025-31718</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access</p> usecaseintel:cve:CVE-2025-31718 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2025-1974 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2025-1974</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2025-1974 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer [CVE/CRIT] CVE-2025-10123 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2025-10123</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2025-10123 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer [CVE/CRIT] CVE-2024-4577 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2024-4577</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2024-4577 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer CISA KEV [CVE/CRIT] CVE-2024-29269 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2024-29269</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2024-29269 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer [CVE/CRIT] CVE-2024-10914 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2024-10914</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2024-10914 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer [CVE/CRIT] CVE-2023-34362 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2023-34362</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2023-34362 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News CISA KEV [CVE/CRIT] CVE-2023-1389 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2023-1389</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2023-1389 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer CISA KEV [CVE/CRIT] CVE-2022-37055 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2022-37055</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2022-37055 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer CISA KEV [CVE/CRIT] CVE-2022-30525 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2022-30525</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2022-30525 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer CISA KEV [CVE/CRIT] CVE-2022-29464 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2022-29464</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2022-29464 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer CISA KEV [CVE/CRIT] CVE-2022-26134 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2022-26134</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2022-26134 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer CISA KEV [CVE/CRIT] CVE-2022-20210 https://thehackernews.com/2026/08/unisoc-volte-video-call-exploit-chain.html <p><strong>CVE:</strong> <code>CVE-2022-20210</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News</p><p>Context: Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access</p> usecaseintel:cve:CVE-2022-20210 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2021-46422 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2021-46422</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2021-46422 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer [CVE/CRIT] CVE-2021-36260 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2021-36260</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2021-36260 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer CISA KEV [CVE/CRIT] CVE-2020-10987 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2020-10987</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2020-10987 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer CISA KEV [CVE/CRIT] CVE-2019-14931 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2019-14931</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2019-14931 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer [CVE/CRIT] CVE-2018-14558 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2018-14558</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2018-14558 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer CISA KEV [CVE/CRIT] CVE-2016-6277 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2016-6277</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2016-6277 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer CISA KEV [CVE/CRIT] CVE-2007-3010 https://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.html <p><strong>CVE:</strong> <code>CVE-2007-3010</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-17 · Sources: The Hacker News, BleepingComputer, CISA KEV</p><p>Context: Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies</p> usecaseintel:cve:CVE-2007-3010 Mon, 17 Aug 2026 00:00:00 +0000 The Hacker News BleepingComputer CISA KEV [SHA256/CRIT] e853748ca8f9a5a9168263617409a9039ab09f4ffc7d860374c1e3b0b67b31a5 https://www.bleepingcomputer.com/news/security/new-amnesiastealer-macos-malware-hijacks-browser-sessions-via-remote-control/ <p><strong>SHA256:</strong> <code>e853748ca8f9a5a9168263617409a9039ab09f4ffc7d860374c1e3b0b67b31a5</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-16 · Sources: BleepingComputer, The Hacker News</p><p>Context: New AmnesiaStealer macOS malware hijacks browser sessions via remote control</p> usecaseintel:sha256:e853748ca8f9a5a9168263617409a9039ab09f4ffc7d860374c1e3b0b67b31a5 Sun, 16 Aug 2026 00:00:00 +0000 BleepingComputer The Hacker News [SHA256/CRIT] de5748aac4a4d4cb48cf050652679e6bc49eda33d9ffaa0d280b578122fab55a https://www.bleepingcomputer.com/news/security/new-amnesiastealer-macos-malware-hijacks-browser-sessions-via-remote-control/ <p><strong>SHA256:</strong> <code>de5748aac4a4d4cb48cf050652679e6bc49eda33d9ffaa0d280b578122fab55a</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-16 · Sources: BleepingComputer, The Hacker News</p><p>Context: New AmnesiaStealer macOS malware hijacks browser sessions via remote control</p> usecaseintel:sha256:de5748aac4a4d4cb48cf050652679e6bc49eda33d9ffaa0d280b578122fab55a Sun, 16 Aug 2026 00:00:00 +0000 BleepingComputer The Hacker News [DOMAIN/HIGH] safepal.com https://www.bleepingcomputer.com/news/security/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale/ <p><strong>DOMAIN:</strong> <code>safepal.com</code></p><p>Severity: <strong>high</strong> · First seen: 2026-08-16 · Sources: BleepingComputer</p><p>Context: SafePal data breach impacts 39,798 customers, stolen info for sale</p> usecaseintel:domain:safepal.com Sun, 16 Aug 2026 00:00:00 +0000 BleepingComputer [DOMAIN/CRIT] github.aoitour.com https://www.bleepingcomputer.com/news/security/new-amnesiastealer-macos-malware-hijacks-browser-sessions-via-remote-control/ <p><strong>DOMAIN:</strong> <code>github.aoitour.com</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-16 · Sources: BleepingComputer, The Hacker News</p><p>Context: New AmnesiaStealer macOS malware hijacks browser sessions via remote control</p> usecaseintel:domain:github.aoitour.com Sun, 16 Aug 2026 00:00:00 +0000 BleepingComputer The Hacker News [DOMAIN/CRIT] debug.allllowef.space https://www.bleepingcomputer.com/news/security/new-amnesiastealer-macos-malware-hijacks-browser-sessions-via-remote-control/ <p><strong>DOMAIN:</strong> <code>debug.allllowef.space</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-16 · Sources: BleepingComputer, The Hacker News</p><p>Context: New AmnesiaStealer macOS malware hijacks browser sessions via remote control</p> usecaseintel:domain:debug.allllowef.space Sun, 16 Aug 2026 00:00:00 +0000 BleepingComputer The Hacker News [CVE/CRIT] CVE-2020-9771 https://www.bleepingcomputer.com/news/security/new-amnesiastealer-macos-malware-hijacks-browser-sessions-via-remote-control/ <p><strong>CVE:</strong> <code>CVE-2020-9771</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-16 · Sources: BleepingComputer, The Hacker News</p><p>Context: New AmnesiaStealer macOS malware hijacks browser sessions via remote control</p> usecaseintel:cve:CVE-2020-9771 Sun, 16 Aug 2026 00:00:00 +0000 BleepingComputer The Hacker News [SHA256/CRIT] cd08115806662469bbedec4b03f8427b97c8a4b3bc1442dc18b72b4e19395fe3 https://www.stepsecurity.io/blog/teampcp-supply-chain-attack-cicd-secrets-cloudsek-disclosure <p><strong>SHA256:</strong> <code>cd08115806662469bbedec4b03f8427b97c8a4b3bc1442dc18b72b4e19395fe3</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-15 · Sources: StepSecurity</p><p>Context: Team PCP Stole 78,330 Secrets From 2,186 Organizations. CloudSEK Just Published the List.</p> usecaseintel:sha256:cd08115806662469bbedec4b03f8427b97c8a4b3bc1442dc18b72b4e19395fe3 Sat, 15 Aug 2026 00:00:00 +0000 StepSecurity [SHA256/CRIT] 7321caa303fe96ded0492c747d2f353c4f7d17185656fe292ab0a59e2bd0b8d9 https://www.stepsecurity.io/blog/teampcp-supply-chain-attack-cicd-secrets-cloudsek-disclosure <p><strong>SHA256:</strong> <code>7321caa303fe96ded0492c747d2f353c4f7d17185656fe292ab0a59e2bd0b8d9</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-15 · Sources: StepSecurity</p><p>Context: Team PCP Stole 78,330 Secrets From 2,186 Organizations. CloudSEK Just Published the List.</p> usecaseintel:sha256:7321caa303fe96ded0492c747d2f353c4f7d17185656fe292ab0a59e2bd0b8d9 Sat, 15 Aug 2026 00:00:00 +0000 StepSecurity [IPV4/CRIT] 83.142.209.203 https://www.stepsecurity.io/blog/teampcp-supply-chain-attack-cicd-secrets-cloudsek-disclosure <p><strong>IPV4:</strong> <code>83.142.209.203</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-15 · Sources: StepSecurity, Snyk</p><p>Context: Team PCP Stole 78,330 Secrets From 2,186 Organizations. CloudSEK Just Published the List.</p> usecaseintel:ipv4:83.142.209.203 Sat, 15 Aug 2026 00:00:00 +0000 StepSecurity Snyk [CVE/CRIT] CVE-2026-65400 https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html <p><strong>CVE:</strong> <code>CVE-2026-65400</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-15 · Sources: The Hacker News</p><p>Context: Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner</p> usecaseintel:cve:CVE-2026-65400 Sat, 15 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2026-58231 https://thehackernews.com/2026/08/sap-commerce-cloud-cve-2026-58231.html <p><strong>CVE:</strong> <code>CVE-2026-58231</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-15 · Sources: The Hacker News</p><p>Context: SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch</p> usecaseintel:cve:CVE-2026-58231 Sat, 15 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2026-43779 https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html <p><strong>CVE:</strong> <code>CVE-2026-43779</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-15 · Sources: The Hacker News</p><p>Context: Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner</p> usecaseintel:cve:CVE-2026-43779 Sat, 15 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2026-43777 https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html <p><strong>CVE:</strong> <code>CVE-2026-43777</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-15 · Sources: The Hacker News</p><p>Context: Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner</p> usecaseintel:cve:CVE-2026-43777 Sat, 15 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2026-43760 https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html <p><strong>CVE:</strong> <code>CVE-2026-43760</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-15 · Sources: The Hacker News</p><p>Context: Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner</p> usecaseintel:cve:CVE-2026-43760 Sat, 15 Aug 2026 00:00:00 +0000 The Hacker News [CVE/CRIT] CVE-2026-33634 https://www.stepsecurity.io/blog/teampcp-supply-chain-attack-cicd-secrets-cloudsek-disclosure <p><strong>CVE:</strong> <code>CVE-2026-33634</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-15 · Sources: StepSecurity, The Hacker News, CISA KEV</p><p>Context: Team PCP Stole 78,330 Secrets From 2,186 Organizations. CloudSEK Just Published the List.</p> usecaseintel:cve:CVE-2026-33634 Sat, 15 Aug 2026 00:00:00 +0000 StepSecurity The Hacker News CISA KEV [SHA256/CRIT] fd3ca4007b225fdf8de7af4345a19179d5efa8c4bb9205f88cda806e5684b1eb https://www.aikido.dev/blog/top-enterprise-sca-tools <p><strong>SHA256:</strong> <code>fd3ca4007b225fdf8de7af4345a19179d5efa8c4bb9205f88cda806e5684b1eb</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-14 · Sources: Aikido, Unit 42 (Palo Alto), Cisco Talos, Microsoft Security Blog</p><p>Context: Top enterprise SCA tools in 2026</p> usecaseintel:sha256:fd3ca4007b225fdf8de7af4345a19179d5efa8c4bb9205f88cda806e5684b1eb Fri, 14 Aug 2026 00:00:00 +0000 Aikido Unit 42 (Palo Alto) Cisco Talos Microsoft Security Blog [SHA256/CRIT] f1ef5fe4c0cdcff13cc750c867728b89719f81437bdc49041edd1ae1f3edb4e8 https://thehackernews.com/2026/08/china-linked-jewelbug-uses-xg-web-for.html <p><strong>SHA256:</strong> <code>f1ef5fe4c0cdcff13cc750c867728b89719f81437bdc49041edd1ae1f3edb4e8</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-14 · Sources: The Hacker News</p><p>Context: China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud</p> usecaseintel:sha256:f1ef5fe4c0cdcff13cc750c867728b89719f81437bdc49041edd1ae1f3edb4e8 Fri, 14 Aug 2026 00:00:00 +0000 The Hacker News [SHA256/CRIT] ed96e7f1085a50251eb8967ac53777272a617831084f0edad8a769c583a18869 https://thehackernews.com/2026/08/china-linked-jewelbug-uses-xg-web-for.html <p><strong>SHA256:</strong> <code>ed96e7f1085a50251eb8967ac53777272a617831084f0edad8a769c583a18869</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-14 · Sources: The Hacker News</p><p>Context: China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud</p> usecaseintel:sha256:ed96e7f1085a50251eb8967ac53777272a617831084f0edad8a769c583a18869 Fri, 14 Aug 2026 00:00:00 +0000 The Hacker News [SHA256/CRIT] ea893abf20b00d9bfc042a88fbf7b4bd42e68ce07c116d3e3b002e5b4a853877 https://thehackernews.com/2026/08/china-linked-jewelbug-uses-xg-web-for.html <p><strong>SHA256:</strong> <code>ea893abf20b00d9bfc042a88fbf7b4bd42e68ce07c116d3e3b002e5b4a853877</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-14 · Sources: The Hacker News</p><p>Context: China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud</p> usecaseintel:sha256:ea893abf20b00d9bfc042a88fbf7b4bd42e68ce07c116d3e3b002e5b4a853877 Fri, 14 Aug 2026 00:00:00 +0000 The Hacker News [SHA256/CRIT] e809da86bd81463347fa7f922d3e088755a94a331889d32acb55aa8f57778a34 https://thehackernews.com/2026/08/china-linked-jewelbug-uses-xg-web-for.html <p><strong>SHA256:</strong> <code>e809da86bd81463347fa7f922d3e088755a94a331889d32acb55aa8f57778a34</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-14 · Sources: The Hacker News</p><p>Context: China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud</p> usecaseintel:sha256:e809da86bd81463347fa7f922d3e088755a94a331889d32acb55aa8f57778a34 Fri, 14 Aug 2026 00:00:00 +0000 The Hacker News [SHA256/CRIT] e7e3b0bcd6798634adf8b49d305f3a7b7682e4b76db549682a183c5a186df4bb https://thehackernews.com/2026/08/china-linked-jewelbug-uses-xg-web-for.html <p><strong>SHA256:</strong> <code>e7e3b0bcd6798634adf8b49d305f3a7b7682e4b76db549682a183c5a186df4bb</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-14 · Sources: The Hacker News</p><p>Context: China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud</p> usecaseintel:sha256:e7e3b0bcd6798634adf8b49d305f3a7b7682e4b76db549682a183c5a186df4bb Fri, 14 Aug 2026 00:00:00 +0000 The Hacker News [SHA256/CRIT] e782a6d4919f194d41e524ebd6df5894197043cf772fcf60455127b246f302c0 https://thehackernews.com/2026/08/china-linked-jewelbug-uses-xg-web-for.html <p><strong>SHA256:</strong> <code>e782a6d4919f194d41e524ebd6df5894197043cf772fcf60455127b246f302c0</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-14 · Sources: The Hacker News</p><p>Context: China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud</p> usecaseintel:sha256:e782a6d4919f194d41e524ebd6df5894197043cf772fcf60455127b246f302c0 Fri, 14 Aug 2026 00:00:00 +0000 The Hacker News [SHA256/CRIT] e6ff096a0562c0042b09d250bd60272ffcd8d72bd95c563842acf765a8dc8bcf https://thehackernews.com/2026/08/china-linked-jewelbug-uses-xg-web-for.html <p><strong>SHA256:</strong> <code>e6ff096a0562c0042b09d250bd60272ffcd8d72bd95c563842acf765a8dc8bcf</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-14 · Sources: The Hacker News</p><p>Context: China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud</p> usecaseintel:sha256:e6ff096a0562c0042b09d250bd60272ffcd8d72bd95c563842acf765a8dc8bcf Fri, 14 Aug 2026 00:00:00 +0000 The Hacker News [SHA256/CRIT] e2eb7703047b37b28dc34e6990205d758a2454b39bc655b460606745fadcb530 https://thehackernews.com/2026/08/china-linked-jewelbug-uses-xg-web-for.html <p><strong>SHA256:</strong> <code>e2eb7703047b37b28dc34e6990205d758a2454b39bc655b460606745fadcb530</code></p><p>Severity: <strong>crit</strong> · First seen: 2026-08-14 · Sources: The Hacker News</p><p>Context: China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud</p> usecaseintel:sha256:e2eb7703047b37b28dc34e6990205d758a2454b39bc655b460606745fadcb530 Fri, 14 Aug 2026 00:00:00 +0000 The Hacker News