{"type":"bundle","id":"bundle--e4537993-6a56-5707-bead-b9523bad28ac","objects":[{"type":"identity","spec_version":"2.1","id":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-01-01T00:00:00.000Z","modified":"2026-01-01T00:00:00.000Z","name":"CTI-Hermes Autonomous Agent","identity_class":"organization"},{"type":"indicator","spec_version":"2.1","id":"indicator--4db22a6d-0dd2-5d64-8234-08c1404dfa05","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-27T08:07:35.253169Z","modified":"2026-08-27T08:07:35.253169Z","name":"SIGMA: Avada WordPress arbitrary PHP execution","indicator_types":["malicious-activity"],"pattern":"[network-traffic:dst_ref.value = 'Avada WordPress arbitrary PHP execution']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-27T08:07:35.253169Z","confidence":75},{"type":"report","spec_version":"2.1","id":"report--ec7d2d1e-2107-5dad-86ca-b6b4d2475dad","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-27T08:07:35.253169Z","modified":"2026-10-30T14:11:13.795226Z","name":"Critical Avada WordPress theme flaw enables zero-click RCE","description":"BleepingComputer reported a critical Avada WordPress theme vulnerability chain that permits unauthenticated arbitrary PHP code execution. Public reporting does not establish any organization's exposure.","published":"2026-08-27T08:07:35.253169Z","report_types":["threat-report"],"object_refs":["identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","indicator--4db22a6d-0dd2-5d64-8234-08c1404dfa05"],"confidence":75}]}