Tag: 2026-06-03

9 Attack Reports | 155 Vulnerabilities

Attack reports

The Demon Arrives Later: A Havoc Stager Hides Behind Microsoft Defender DLP

Cybercriminals in Brazil are exploiting the country's electronic invoice system (Nota Fiscal eletrônica) to deliver Havoc framework implants. The campaign surfaced during May 2026, coinciding with tax season when accountants routinely process invoice-related emails. Attackers distribute malicious Z…
havoc
kongtuke
banana rat
2026-06-03
brazil tax lure
invoice phishing
Published: June 3, 2026
Linked vulnerabilities : CVE-2026-45585 (CVSS 6.8)
Downloadable IOCs: 23

Inside the Cross-Platform Propagation of a New Gafgyt Variant C0XMO

A new Gafgyt botnet variant named C0XMO has been discovered that spreads by exploiting a stack buffer overflow vulnerability in DD-WRT router firmware. Unlike earlier versions, this malware separates its lateral movement capabilities into a standalone Python script, enabling more efficient targetin…
ddos
botnet
gafgyt
2026-06-03
c0xmo
python scanner
Published: June 3, 2026
Linked vulnerabilities : CVE-2015-2051, CVE-2025-34054 (CVSS 10.0), CVE-2016-15047 (CVSS 8.7), CVE-2021-27137, CVE-2022-35914
Downloadable IOCs: 18

PCPJack Hijacked 230 AWS, GCP, and Azure Servers to Run a Hidden SMTP Relay Network

PCPJack operators compromised 230 cloud Linux servers across AWS, GCP, and Azure to build a covert SMTP relay network for email-based attacks. Researchers discovered exposed directories on infrastructure at 213.136.80[.]73 containing complete deployment toolkits including Chisel binaries, Python de…
sliver
chisel
proxy network
teampcp
pcpjack
2026-06-03
cloud compromise
smtp relay
Published: June 3, 2026
Linked vulnerabilities : CVE-2021-4034
Downloadable IOCs: 2

Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution Ecosystem

A large-scale operation impersonates open-source and freeware projects to capture search traffic, targeting tools such as Ghidra, dnSpy, and SpiderFoot. The professionally designed sites load CloudFront-hosted JavaScript that converts download button clicks into handoffs to a Traffic Distribution S…
infostealer
click hijacking
traffic distribution system
cryptocurrency clipper
2026-06-03
animateclipper
remusstealer
sessiongate
Published: June 3, 2026
Downloadable IOCs: 25

FSB’s matryoshka #2/3 – Gamaredon’s gifts that keeps unpacking – GammaLoad

Gamaredon, an FSB-operated cyberespionage group, continues targeting Ukrainian government, military, and critical infrastructure through sophisticated multi-stage infection chains. This analysis examines GammaLoad, a collection of VBScript loaders that establish continuous access through three dist…
fsb
gammaload
gamaredon
gammasteel
gammaphish
gammaworm
2026-06-03
gammawipe
Published: June 3, 2026
Downloadable IOCs: 1

Error 524 Decoy: Unmasking a Global Smishing Operation Hiding Behind Error Pages

A sophisticated smishing and phishing operation active since the second half of 2025 has impersonated over 267 brands across 72 countries, with particular concentration in Latin America. The campaign generated 4,389 phishing domain instances, with Mexico accounting for 1,851 cases. Telecommunicatio…
smishing
brand impersonation
credit card theft
phishing-as-a-service
2026-06-03
mobile targeting
Published: June 3, 2026
Downloadable IOCs: 7

Inside DesckVB Rat Analysis: From Malspam to In-Memory RAT

DesckVB RAT emerged in February 2026 through a sophisticated malspam campaign utilizing a dynamic delivery kit that personalizes lures on-the-fly by extracting victim email addresses and pulling company logos in real-time. The attack chain routes through Google's DoubleClick domain to evade email g…
malspam
venomrat
in-memory execution
amsi bypass
2026-06-03
desckvb rat
jscript loader
Published: June 3, 2026
Downloadable IOCs: 8

Espionage Campaign Targeted Stock Exchange Executive for Five Months

Unknown attackers conducted a five-month espionage campaign against a senior executive at a major global stock exchange, systematically stealing the victim's Outlook mailbox in incremental batches. The attackers demonstrated sophisticated operational discipline by using legitimate cloud services li…
2026-06-03
email theft
frpc
outlook ost
secretsdump
stock exchange
Published: June 3, 2026
Downloadable IOCs: 20

TA4922: The Suspected Chinese Crime Group is Going Global

TA4922 is a highly sophisticated Chinese-speaking threat actor demonstrating rapid operational tempo and continually evolving malware capabilities. Initially targeting East Asia, particularly Japan, the group has expanded globally to Europe and Africa. The actor deploys multiple malware families in…
valleyrat
2026-06-03
atlas rat
romulusloader
silentrunloader
ta4922
Published: June 3, 2026
Downloadable IOCs: 21
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-47065

9.8
    Apache
  • Java
  • Commons-Lang
Published: June 3, 2026

CVE-2026-36576

9.8
    Openlabs
  • Docker-Wkhtmltopdf-Aas
Published: June 3, 2026

CVE-2026-35075

9.3
    Unknown
  • Device Firmware
Published: June 3, 2026

CVE-2026-4035

9.1
    Mlflow
  • Mlflow
Published: June 3, 2026

CVE-2026-36748

9.0
    Rockrms
  • Rockrms
Published: June 3, 2026

CVE-2025-15656

8.8
    Mojoomla
  • School Management
Published: June 3, 2026

CVE-2026-36607

8.8
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-36608

8.8
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-35082

8.7
    Unknown
  • Ugw-Logread
Published: June 3, 2026

CVE-2026-35083

8.7
    *
  • *
Published: June 3, 2026

CVE-2026-35084

8.7
    Dali
  • Dali-Devconfig
Published: June 3, 2026

CVE-2026-35085

8.7
    Gdv
  • Gdv-Serverconfig
Published: June 3, 2026

CVE-2026-20230

8.6
    Cisco
  • Unified Communications Manager
  • Unified Communications Manager Session Management Edition
Published: June 3, 2026

CVE-2026-42321

8.4
    Glpi
  • Glpi
Published: June 3, 2026

CVE-2026-7888

8.4
    Concrete
  • Concrete Cms
Published: June 3, 2026

CVE-2026-5241

8.0
    Huggingface
  • Transformers
Published: June 3, 2026

CVE-2022-49036

7.8
    Synology
  • Active Backup For Business
Published: June 3, 2026

CVE-2022-49042

7.8
    Synology
  • Hyper Backup Explorer
  • Mingw
Published: June 3, 2026

CVE-2026-40290

7.8
    Op-Tee
  • Op-Tee
Published: June 3, 2026

CVE-2025-15655

7.6
    Mojoomla
  • School Management
Published: June 3, 2026

CVE-2026-9516

7.5
    Cpanel
  • Json Xs
Published: June 3, 2026

CVE-2026-50031

7.5
    Freeipmi
  • Freeipmi
Published: June 3, 2026

CVE-2026-41032

7.5
    *
  • *
Published: June 3, 2026

CVE-2026-9334

7.3
    Cpanel
  • Json Xs
Published: June 3, 2026

CVE-2025-14771

7.3
    Abb
  • T-Mac Plus
Published: June 3, 2026

CVE-2025-14772

7.3
    Abb
  • T-Mac Plus
Published: June 3, 2026

CVE-2025-41259

7.3
    Swupdate
  • Swupdate
Published: June 3, 2026

CVE-2026-37462

7.3
    Gobgp
  • Gobgp
Published: June 3, 2026

CVE-2026-36609

7.3
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-36611

7.3
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-42061

7.3
    Acronis
  • Devicelock Dlp
Published: June 3, 2026

CVE-2026-44609

7.3
    Acronis
  • Devicelock
Published: June 3, 2026

CVE-2026-44682

7.3
    Acronis
  • Devicelock Dlp
Published: June 3, 2026

CVE-2026-50033

7.3
    Acronis
  • Devicelock Dlp
Published: June 3, 2026

CVE-2025-14773

7.2
    Abb
  • T-Mac Plus
Published: June 3, 2026

CVE-2025-14774

7.2
    Abb
  • T-Mac Plus
Published: June 3, 2026

CVE-2026-35076

7.2
    Bac
  • *
Published: June 3, 2026

CVE-2026-35077

7.2
    *
  • *
Published: June 3, 2026

CVE-2026-35078

7.2
    *
  • *
Published: June 3, 2026

CVE-2026-35079

7.2
    *
  • Ugw
Published: June 3, 2026

CVE-2026-35080

7.2
    *
  • Ugw
Published: June 3, 2026

CVE-2026-35081

7.2
    *
  • *
Published: June 3, 2026

CVE-2025-15654

7.1
    Fox-Themes
  • Prague
Published: June 3, 2026

CVE-2019-25720

7.1
    Drager
  • Sc 6002xl
  • Sc 6802xl
  • Sc 7000
  • Sc 8000
  • Sc 9000 Xl
Published: June 3, 2026

CVE-2026-36606

7.1
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-42317

7.0
    Glpi Project
  • Glpi
Published: June 3, 2026

CVE-2026-42318

7.0
    Glpi-Project
  • Glpi
Published: June 3, 2026

CVE-2026-44281

7.0
    Glpi
  • Glpi
Published: June 3, 2026

CVE-2026-47325

6.9
    Projectsandprograms
  • School-Management-System
Published: June 3, 2026

CVE-2026-40495

6.9
    Fossbilling
  • Fossbilling
Published: June 3, 2026

CVE-2025-70101

6.5
    Lwext4
  • Lwext4
Published: June 3, 2026

CVE-2026-36604

6.5
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-36605

6.5
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-3276

6.3
    Python
  • Python
Published: June 3, 2026

CVE-2026-39107

6.3
    Kimi Ai
  • Kimi
Published: June 3, 2026

CVE-2026-6657

6.1
    Jupyter
  • Jupyter-Server
Published: June 3, 2026

CVE-2026-20175

6.1
    Cisco
  • Finesse
Published: June 3, 2026

CVE-2026-20233

6.1
    Cisco
  • Webex Meetings
Published: June 3, 2026

CVE-2023-52951

5.9
    Synology
  • Note Station Client
Published: June 3, 2026

CVE-2026-42320

5.9
    Glpi
  • Glpi
Published: June 3, 2026

CVE-2026-36610

5.9
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-46447

5.8
    Openstack
  • Ironic
Published: June 3, 2026

CVE-2026-10694

5.5
    Sourcecodester
  • Online Food Ordering System
Published: June 3, 2026

CVE-2026-10704

5.5
    Sourcecodester
  • Pizzafy E-Commerce System
Published: June 3, 2026

CVE-2025-70100

5.5
    Lwext4
  • Lwext4
Published: June 3, 2026

CVE-2026-10771

5.5
    Crmeb
  • Crmeb Java
Published: June 3, 2026

CVE-2026-10777

5.5
    Ealpha072
  • Student-Management-System
Published: June 3, 2026

CVE-2026-5078

5.3
    Morgan
  • Morgan
Published: June 3, 2026

CVE-2026-44545

5.3
    Django
  • Daphne
Published: June 3, 2026

CVE-2026-22054

5.3
    Netapp
  • Active Iq Config Advisor
Published: June 3, 2026

CVE-2026-22055

5.3
    Netapp
  • Active Iq Onecollect
Published: June 3, 2026

CVE-2026-47324

5.1
    Projectsandprograms
  • School-Management-System
Published: June 3, 2026

CVE-2022-31114

5.1
    Backpack
  • Crud
Published: June 3, 2026

CVE-2026-42840

5.1
    Erpnext
  • Erpnext
Published: June 3, 2026

CVE-2025-60477

5.0
    Gpac
  • Mp4box
Published: June 3, 2026

CVE-2026-42839

4.8
    Erpnext
  • Erpnext
Published: June 3, 2026

CVE-2026-43924

4.8
    Fossbilling
  • Fossbilling
Published: June 3, 2026

CVE-2026-45614

4.7
    Op-Tee
  • Op-Tee
Published: June 3, 2026

CVE-2026-7421

4.4
    Wordpress
  • Passeum Ticketing
Published: June 3, 2026

CVE-2026-45702

4.4
    Op-Tee
  • Op-Tee
Published: June 3, 2026

CVE-2026-9732

4.3
    Wordpress
  • Emergencywp
Published: June 3, 2026

CVE-2024-47273

4.3
    Synology
  • Hyper Backup
Published: June 3, 2026

CVE-2026-36613

4.3
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-36615

4.3
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-36618

4.3
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2024-47263

4.1
    Synology
  • Hyper Backup
Published: June 3, 2026

CVE-2026-44546

3.7
    Daphne
  • *
Published: June 3, 2026

CVE-2026-10705

2.3
    Dask
  • Dask
Published: June 3, 2026

CVE-2026-50052

2.3
    Vinyl Cache
  • Vinyl Cache
    Varnish Cache
Published: June 3, 2026

CVE-2026-35193

2.3
    Djangoproject
  • Django
Published: June 3, 2026

CVE-2026-48587

2.3
    Djangoproject
  • Django
Published: June 3, 2026

CVE-2026-6873

2.3
    Djangoproject
  • Django
Published: June 3, 2026

CVE-2026-7666

2.3
    Djangoproject
  • Django
Published: June 3, 2026

CVE-2026-8404

2.3
    Domaindjango
  • Django
Published: June 3, 2026

CVE-2026-10690

2.1
    Wonderwhy-Er
  • Desktopcommandermcp
Published: June 3, 2026

CVE-2026-10691

2.1
    Wonderwhy-Er
  • Desktopcommandermcp
Published: June 3, 2026

CVE-2026-10692

2.1
    Johnhuang316
  • Code-Index-Mcp
Published: June 3, 2026

CVE-2026-10693

2.1
    Sourcecodester
  • Online Boat Reservation System
Published: June 3, 2026

CVE-2026-10703

2.1
    Eipstackgroup
  • Opener
Published: June 3, 2026

CVE-2026-10722

1.9
    Cilium
  • Ebpf
Published: June 3, 2026

CVE-2026-10729

1.2
    Thinkst
  • Canarytokens
Published: June 3, 2026

CVE-2026-10766

1.1
    Mlrun
  • Mlrun
Published: June 3, 2026

CVE-2026-10775

1.1
    Sgl-Project
  • Sglang
Published: June 3, 2026

CVE-2026-37460

None
    Frr
  • Frr
Published: June 3, 2026

CVE-2026-36574

None
    Wassimulator
  • Cactusviewer
Published: June 3, 2026

CVE-2025-71313

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2025-71314

None
    Linux
  • Kernel
Published: June 3, 2026

CVE-2026-36460

None
    Dovestones Software
  • Adphonebook
Published: June 3, 2026

CVE-2026-36602

None
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-36603

None
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-36612

None
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-36616

None
    Mercusys
  • Ac12g
Published: June 3, 2026

CVE-2026-46244

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2026-46245

None
    Linux
  • Kernel
Published: June 3, 2026

CVE-2026-46246

None
    Linux
  • Kernel
Published: June 3, 2026

CVE-2026-46247

None
    Linux
  • Linux Kernel
    Qualcomm
Published: June 3, 2026

CVE-2026-46248

None
    Linux
  • Linux Kernel
  • Ath12k
Published: June 3, 2026

CVE-2026-46249

None
    Linux
  • Linux Kernel
  • Octeontx2 Af
Published: June 3, 2026

CVE-2026-46250

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2026-46251

None
    Linux
  • Kernel
Published: June 3, 2026

CVE-2026-46252

None
    Linux
  • Kernel
Published: June 3, 2026

CVE-2026-46253

None
    Linux
  • Kernel
Published: June 3, 2026

CVE-2026-46254

None
    Linux
  • Linux Kernel
    Apparmor
Published: June 3, 2026

CVE-2026-46255

None
    Linux
  • Kernel
Published: June 3, 2026

CVE-2026-46256

None
    Linux
  • Linux Kernel
    Nfs
Published: June 3, 2026

CVE-2026-46257

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2026-46258

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2026-46259

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2026-46260

None
    Linux
  • Linux Kernel
  • Ipv6
Published: June 3, 2026

CVE-2026-46261

None
    Linux
  • Linux Kernel
  • Spi
Published: June 3, 2026

CVE-2026-46262

None
    Linux
  • Linux Kernel
  • Asoc Fsl Xcvr
Published: June 3, 2026

CVE-2026-46263

None
    Linux
  • Linux Kernel
    Amd
Published: June 3, 2026

CVE-2026-46264

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2026-46265

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2026-46266

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2026-46267

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2026-46268

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2026-46269

None
    Linux
  • Linux Kernel
    Canaan
Published: June 3, 2026

CVE-2026-46270

None
    Linux
  • Kernel
Published: June 3, 2026

CVE-2026-46271

None
    Linux
  • Linux Kernel
    Qca
Published: June 3, 2026

CVE-2026-46272

None
    Linux
  • Linux Kernel
Published: June 3, 2026

CVE-2026-46273

None
    Linux
  • Linux Kernel
  • Ibmveth
Published: June 3, 2026

CVE-2026-26378

None
    Koha
  • Koha
Published: June 3, 2026

CVE-2026-26379

None
    Koha
  • Koha
Published: June 3, 2026

CVE-2026-8874

None
    Securly
  • Securly Chrome Extension
Published: June 3, 2026

CVE-2026-8876

None
    Securly
  • Securly Chrome Extension
Published: June 3, 2026

CVE-2026-8878

None
    Securly
  • Chrome Extension
Published: June 3, 2026

CVE-2026-8879

None
    Securly
  • Chrome Extension
Published: June 3, 2026

CVE-2026-8881

None
    Securly
  • Securly Chrome Extension
Published: June 3, 2026

CVE-2026-8888

None
    Securly
  • Securly Chrome Extension
Published: June 3, 2026

CVE-2026-8889

None
    Securly
  • Chrome Extension
Published: June 3, 2026

CVE-2026-26824

None
    Libxls
  • Libxls
Published: June 3, 2026

CVE-2026-26825

None
    Libxls
  • Libxls
Published: June 3, 2026

CVE-2026-37700

None
    Maxsite
  • Maxsite Cms
Published: June 3, 2026

CVE-2026-2596

None
    Gitlab
  • Gitlab
Published: June 3, 2026
Click here to see more Vulnerabilities