Reports · Hermes CTI

● CRITICAL Confidence 95% new

Updated 2026-09-24 23:51:41.706898+00:00

CISA Rapid7 Threat Research Canadian Centre for Cyber Security Rapid7 CERT-EU

F5 BIG-IP APM zero-day exploitation

8 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-94127

Products: F5 BIG-IP Access Policy Manager

ATT&CK: T1190

● CRITICAL Confidence 90% new

Updated 2026-09-24 19:51:02.741409+00:00

Canadian Centre For Cyber Security Alerts Check Point Research CISA CISA KEV Nist National Vulnerability Database Nvd Soc Prime Detection News The Hacker News NIST NVD SOC Prime

MikroTik RouterOS CVE-2026-86060 exploited in the wild

19 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-86060

ATT&CK: T1190

● CRITICAL Confidence 90% new

Updated 2026-09-24 19:51:01.098551+00:00

Canadian Centre For Cyber Security Alerts CISA CISA KEV Nist National Vulnerability Database Nvd NIST NVD

ConnectWise ScreenConnect CVE-2026-84869 exploited in the wild

11 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-84869

ATT&CK: T1190

● CRITICAL Confidence 90% new

Updated 2026-09-24 19:50:52.683737+00:00

Canadian Centre For Cyber Security Alerts Check Point Research CISA CISA KEV Nist National Vulnerability Database Nvd Soc Prime Detection News The Hacker News NIST NVD SOC Prime

Cisco Identity Services Engine CVE-2026-76460 exploited in the wild

15 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-76460

ATT&CK: T1190

● CRITICAL Confidence 85% new

Updated 2026-09-18 02:18:53.761635+00:00

CISA KEV CISA Google Cloud Threat Intelligence (Mandiant) BleepingComputer The Hacker News

CISA KEV additions: Cisco Secure Firewall Management Center and Oracle PeopleSoft exploitation

11 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-20079 CVE-2026-35273

Products: Cisco Secure Firewall Management Center (FMC) Software and Security Cloud Control (SCC) Firewall Management, Oracle PeopleSoft Enterprise PeopleTools

ATT&CK: T1190

● CRITICAL Confidence 95% new

Updated 2026-09-11 22:24:37.183379+00:00

The Hacker News

Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

2 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-20079

Products: Cisco Secure Firewall Management Center

ATT&CK: T1190 T1486 T1552

● CRITICAL Confidence 95% new

Updated 2026-09-11 22:24:36.857829+00:00

Mandiant Threat Intelligence

ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit

2 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-35273

Products: Oracle PeopleSoft Enterprise PeopleTools

ATT&CK: T1021.004 T1190 T1486

● CRITICAL Confidence 85% new

Updated 2026-08-30 08:05:26.944551+00:00

CISA

CISA Adds Six Known Exploited Vulnerabilities to Catalog

2 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-8452 CVE-2015-5287 CVE-2015-3246 CVE-2019-1068 CVE-2021-23758 CVE-2022-0995

● CRITICAL Confidence 85% new

Updated 2026-08-30 08:05:26.494161+00:00

CISA

CISA Adds Three Known Exploited Vulnerabilities to Catalog

2 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-53362 CVE-2026-66384 CVE-2023-49105

● CRITICAL Confidence 95% updated

Updated 2026-08-29 13:15:02.474980+00:00

Microsoft Threat Intelligence

Analysis of CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

1 source · ✓ Hunt Available · ✓ Remediation Available

● CRITICAL Confidence 95% updated

Updated 2026-08-29 13:15:02.435600+00:00

Microsoft Threat Intelligence

Analysis of GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

1 source · ✓ Hunt Available · ✓ Remediation Available

● CRITICAL Confidence 95% updated

Updated 2026-08-29 13:15:02.273991+00:00

The DFIR Report

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

3 sources · ✓ Hunt Available · ✓ Remediation Available

ATT&CK: T1003.003 T1018 T1021.001 T1021.002 T1021.006 T1055 T1059.001 T1189 T1204.002 T1218.007 T1486 T1574.002

● CRITICAL Confidence 95% updated

Updated 2026-08-29 13:15:02.190772+00:00

The DFIR Report

Analysis of Hide Your RDP: Password Spray Leads to RansomHub Deployment

1 source · ✓ Hunt Available · ✓ Remediation Available

● CRITICAL Confidence 95% updated

Updated 2026-08-29 13:15:02.151924+00:00

The DFIR Report

Analysis of Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware

1 source · ✓ Hunt Available · ✓ Remediation Available

● CRITICAL Confidence 95% updated

Updated 2026-08-29 13:15:02.084890+00:00

The DFIR Report

Analysis of Apache ActiveMQ Exploit Leads to LockBit Ransomware

1 source · ✓ Hunt Available · ✓ Remediation Available

● CRITICAL Confidence 95% updated

Updated 2026-08-29 13:15:02.041306+00:00

The DFIR Report

Analysis of Cat’s Got Your Files: Lynx Ransomware

1 source · ✓ Hunt Available · ✓ Remediation Available

● CRITICAL Confidence 75% new

Updated 2026-08-27 08:07:35.253169+00:00

BleepingComputer

Critical Avada WordPress theme flaw enables zero-click RCE

2 sources · ✓ Hunt Available · ✓ Remediation Available

● CRITICAL Confidence 95% new

Updated 2026-08-26 19:51:13.563194+00:00

Threat Advisory

Analysis of CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys

1 source · ✓ Hunt Available · ✓ Remediation Available

● CRITICAL Confidence 95% new

Updated 2026-08-26 19:51:13.510571+00:00

Threat Advisory

Analysis of CVE-2026-33824: Remote Code Execution in Windows IKEv2

1 source · ✓ Hunt Available · ✓ Remediation Available

● HIGH Confidence 90% new

Updated 2026-09-24 19:51:07.672451+00:00

CISA CISA KEV Nist National Vulnerability Database Nvd Soc Prime Detection News The Hacker News NIST NVD SOC Prime

Acronis Backup CVE-2026-87886 exploited in the wild

10 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-87886

ATT&CK: T1190

Public Threat Reports