Public CTI · Evidence-Centered

Analyst Workspace

Public Threat Reports

Investigate evidence-backed threat reports, IOCs, hunts, detections, and verified remediation guidance.

● HIGH Confidence 90% new

Updated 2026-09-24 19:51:06.055280+00:00

Canadian Centre For Cyber Security Alerts CISA CISA KEV Nist National Vulnerability Database Nvd NIST NVD

MikroTik RouterOS CVE-2026-67277 exploited in the wild

13 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-67277

ATT&CK: T1190

● HIGH Confidence 90% new

Updated 2026-09-24 19:51:04.410767+00:00

Canadian Centre For Cyber Security Alerts CISA CISA KEV Nist National Vulnerability Database Nvd Securityweek Soc Prime Detection News The Hacker News NIST NVD SOC Prime

Google Pixel CVE-2026-58704 exploited in the wild

14 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-58704

ATT&CK: T1190

● HIGH Confidence 95% new

Updated 2026-09-11 22:24:37.032377+00:00

SentinelLabs Threat Research SentinelLabs

macOS Gaslight Rust Backdoor Weaponizes Prompt Injection Against Analysts

2 sources · ✓ Hunt Available · ✓ Remediation Available

ATT&CK: T1071.001 T1543.001 T1555.003

● HIGH Confidence 78% new

Updated 2026-08-31 15:25:29.230953+00:00

The Hacker News

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

2 sources · ✓ Hunt Available · ✓ Remediation Available

● HIGH Confidence 78% new

Updated 2026-08-31 15:25:29.179240+00:00

The Hacker News

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

2 sources · ✓ Hunt Available · ✓ Remediation Available

● HIGH Confidence 78% new

Updated 2026-08-31 15:25:29.123247+00:00

The Hacker News

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

2 sources · ✓ Hunt Available · ✓ Remediation Available

● HIGH Confidence 78% new

Updated 2026-08-31 15:25:29.049654+00:00

Rapid7 Threat Research & AttackerKB Rapid7

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

2 sources · ✓ Hunt Available · ✓ Remediation Available

● HIGH Confidence 78% new

Updated 2026-08-31 15:25:28.961631+00:00

Microsoft Threat Intelligence

TerminalFix campaign deploys a reverse tunnel through multistage intrusion

2 sources · ✓ Hunt Available · ✓ Remediation Available

● HIGH Confidence 85% new

Updated 2026-08-30 08:05:27.372054+00:00

SentinelLabs

PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale

2 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-1357 CVE-2025-29927 CVE-2025-55182 CVE-2025-9501 CVE-2025-48703

● HIGH Confidence 85% new

Updated 2026-08-30 08:05:27.274931+00:00

Trend Micro Zero Day Initiative

CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys

2 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-47291

● HIGH Confidence 85% new

Updated 2026-08-30 08:05:27.182049+00:00

Trend Micro Zero Day Initiative

CVE-2026-33824: Remote Code Execution in Windows IKEv2

2 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-33824

● HIGH Confidence 85% new

Updated 2026-08-30 08:05:27.079610+00:00

Trend Micro Zero Day Initiative

CVE-2026-20841: Arbitrary Code Execution in the Windows Notepad

2 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-20841

● HIGH Confidence 85% new

Updated 2026-08-30 08:05:26.851403+00:00

CISA KEV CISA

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

2 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-66384

● HIGH Confidence 85% new

Updated 2026-08-30 08:05:26.748206+00:00

CISA KEV CISA

ownCloud Improper Authentication Vulnerability

2 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2023-49105

● HIGH Confidence 85% new

Updated 2026-08-30 08:05:26.635801+00:00

CISA KEV CISA

Linux Kernel Unspecified Vulnerability

2 sources · ✓ Hunt Available · ✓ Remediation Available

CVEs: CVE-2026-53362

● HIGH Confidence 95% updated

Updated 2026-08-29 13:15:02.514679+00:00

Microsoft Threat Intelligence

Analysis of Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

1 source · ✓ Hunt Available · ✓ Remediation Available

● HIGH Confidence 95% updated

Updated 2026-08-29 13:15:02.229379+00:00

The DFIR Report

Analysis of KongTuke FileFix Leads to New Interlock RAT Variant

1 source · ✓ Hunt Available · ✓ Remediation Available

● HIGH Confidence 95% updated

Updated 2026-08-29 13:15:02.118079+00:00

The DFIR Report

Analysis of Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting

1 source · ✓ Hunt Available · ✓ Remediation Available

● HIGH Confidence 95% updated

Updated 2026-08-29 13:15:01.984545+00:00

Microsoft Threat Intelligence

Analysis of StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them

1 source · ✓ Hunt Available · ✓ Remediation Available

● HIGH Confidence 95% updated

Updated 2026-08-29 13:15:01.926183+00:00

SentinelLabs

Analysis of One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement

1 source · ✓ Hunt Available · ✓ Remediation Available