# Latest threat intelligence reports — Vorant

Free public briefs, updated continuously. Each links its markdown twin;
drop the `.md` suffix for the HTML page. Agent guide: https://vorant.io/llms.txt

- 2026-07-26 [Genesis group lists JSP Slip Forming as victim](https://vorant.io/reports/36f09ac0-c054-5d1f-9c6c-4f93a5f634b7/genesis-group-lists-jsp-slip-forming-as-victim.md) — medium
- 2026-07-24 [Triple X claims Bank of Baroda data leak](https://vorant.io/reports/34e56483-712e-52a9-98c3-fceae913184b/triple-x-claims-bank-of-baroda-data-leak.md) — high
- 2026-07-24 [Russian Shahed drones strike Mali villages](https://vorant.io/reports/452f23bc-d3bc-568c-8791-d438109b9c0b/russian-shahed-drones-strike-mali-villages.md) — medium
- 2026-07-24 [Iran exploits SS7 to track US troops](https://vorant.io/reports/2467c886-2667-57e8-9622-3db934c92b22/iran-exploits-ss7-to-track-us-troops.md) — medium
- 2026-07-24 [Apereo CAS Client MITM cert flaw disclosed](https://vorant.io/reports/95dfb33b-bd07-5f62-a8f1-a649d44923d0/apereo-cas-client-mitm-cert-flaw-disclosed.md) — medium
- 2026-07-24 [Qilin ransomware claims Kean University breach](https://vorant.io/reports/41cb57f5-8b99-54e2-9ee9-6cc01511addb/qilin-ransomware-claims-kean-university-breach.md) — medium
- 2026-07-24 [GNU coreutils uniq, unexpand flaws patched](https://vorant.io/reports/383798db-0977-54c5-9aa6-868c1e5551ba/gnu-coreutils-uniq-unexpand-flaws-patched.md) — medium
- 2026-07-24 [Nova ransomware claims Digital Edge MSP](https://vorant.io/reports/e3612146-2862-52b1-aae7-27c1f9b61f30/nova-ransomware-claims-digital-edge-msp.md) — medium
- 2026-07-24 [Microsoft Edge Patches Twelve Vulnerabilities](https://vorant.io/reports/8e93af23-c489-5ec9-ad7a-af4eb38ade21/microsoft-edge-patches-twelve-vulnerabilities.md) — medium
- 2026-07-24 [MongoDB patches multiple Compass, Server flaws](https://vorant.io/reports/ea411b83-593e-5e03-82dc-cba13dd8bf21/mongodb-patches-multiple-compass-server-flaws.md) — medium
- 2026-07-24 [Moxa Linux devices hit by SSH keysign flaw](https://vorant.io/reports/fe8a507c-3aed-5a4c-a221-731e477c900c/moxa-linux-devices-hit-by-ssh-keysign-flaw.md) — medium
- 2026-07-24 [ESET macOS Products Get Privilege Escalation Patches](https://vorant.io/reports/8c9c4bf6-e503-588f-8c8c-1a4e7a82d2ff/eset-macos-products-get-privilege-escalation-patches.md) — medium
- 2026-07-24 [NetApp ONTAP 9 Flaw Patched by Vendor](https://vorant.io/reports/209e8814-2b1f-5267-b23a-5a6158cbbf98/netapp-ontap-9-flaw-patched-by-vendor.md) — medium
- 2026-07-23 [Logto SSO flaws enable account takeover, MFA bypass](https://vorant.io/reports/91567505-8c25-5d70-a1b0-6301cb86f7fa/logto-sso-flaws-enable-account-takeover-mfa-bypass.md) — high
- 2026-07-23 [Johnson Controls XAAP Android Stores Data Unencrypted](https://vorant.io/reports/b07ba294-26b2-5313-a2a9-9dfda79e01ed/johnson-controls-xaap-android-stores-data-unencrypted.md) — low
- 2026-07-23 [Panduit IntraVUE ICS software has five flaws](https://vorant.io/reports/0e8b3111-d8ef-5810-a001-ef2845fde9f0/panduit-intravue-ics-software-has-five-flaws.md) — medium
- 2026-07-23 [MZ Automation libIEC61850 IEC 61850 flaws disclosed](https://vorant.io/reports/107d98a6-629f-5cdf-8846-1c62fff2bc85/mz-automation-libiec61850-iec-61850-flaws-disclosed.md) — medium
- 2026-07-23 [Weintek cMT3092X HMI patches privilege flaws](https://vorant.io/reports/80621fc0-3000-557a-b13f-2e5a11f37aa3/weintek-cmt3092x-hmi-patches-privilege-flaws.md) — medium
- 2026-07-23 [Johnson Controls C-CURE 9000 RCE flaw disclosed](https://vorant.io/reports/533b85e3-2dd7-50ab-aaac-c078bf10c1ea/johnson-controls-c-cure-9000-rce-flaw-disclosed.md) — high
- 2026-07-23 [Ransomware.live lists new Gentlemen victim](https://vorant.io/reports/4e939455-d8ee-502f-885b-3665ed3fc57e/ransomware-live-lists-new-gentlemen-victim.md) — low
- 2026-07-23 [JPCERT tracks shifting Mirai-like IoT scanning](https://vorant.io/reports/fc9e503a-e8ec-5974-8cbe-47085f795f77/jpcert-tracks-shifting-mirai-like-iot-scanning.md) — low
- 2026-07-23 [Check Point flaw CVE-2026-16232 exploited in wild](https://vorant.io/reports/688fab7f-a7a7-5ec7-8ed7-280f5de828c0/check-point-flaw-cve-2026-16232-exploited-in-wild.md) — high
- 2026-07-23 [Oracle patches flaws in Process Manufacturing, Solaris](https://vorant.io/reports/5d5a4b28-1bd6-58a6-8fac-dd6eeee8c6e9/oracle-patches-flaws-in-process-manufacturing-solaris.md) — medium
- 2026-07-23 [Mitel MiCollab, OpenScape UC flaws patched](https://vorant.io/reports/174878ca-688a-5533-addf-e587a3125747/mitel-micollab-openscape-uc-flaws-patched.md) — medium
- 2026-07-22 [BlackNevas lists Zuni Shopping Center as victim](https://vorant.io/reports/9a5720ea-009a-5c24-abc6-3cf254f17d89/blacknevas-lists-zuni-shopping-center-as-victim.md) — medium
- 2026-07-22 [Duplicati DLL Hijack Flaw Enables SYSTEM Access](https://vorant.io/reports/aa9202b6-83cf-5eed-b3a2-0b37acb41cd7/duplicati-dll-hijack-flaw-enables-system-access.md) — medium
- 2026-07-22 [Picturall Media Server Root Escalation Flaw Patched](https://vorant.io/reports/59ee925c-c62f-52bb-94c6-4441c7bb5273/picturall-media-server-root-escalation-flaw-patched.md) — medium
- 2026-07-22 [GNU diffutils diff3 buffer overflow disclosed](https://vorant.io/reports/aeb3b130-1247-5205-848d-c8bae8010627/gnu-diffutils-diff3-buffer-overflow-disclosed.md) — medium
- 2026-07-22 [Open Mercato ReDoS Flaw Patched in 0.6.4](https://vorant.io/reports/55642ba9-e45c-56d9-839f-7fa5c4b89c0f/open-mercato-redos-flaw-patched-in-0-6-4.md) — low
- 2026-07-22 [GLPI patches multiple data-security flaws](https://vorant.io/reports/77e0c526-c306-5c75-aa16-4ad8c2e01296/glpi-patches-multiple-data-security-flaws.md) — medium
- 2026-07-22 [SharePoint RCE flaws exploited in the wild](https://vorant.io/reports/e99df3d3-aaf6-5c5c-bbb7-c635f321c7fd/sharepoint-rce-flaws-exploited-in-the-wild.md) — critical
- 2026-07-22 [Multiple flaws hit HPE Aruba Networking gear](https://vorant.io/reports/45df9fe8-6ca1-5c48-93a4-44541d5a7851/multiple-flaws-hit-hpe-aruba-networking-gear.md) — medium
- 2026-07-22 [Elastic patches multiple Elasticsearch, Kibana flaws](https://vorant.io/reports/afc4576b-93fb-56df-b8a5-65a1b55b4b57/elastic-patches-multiple-elasticsearch-kibana-flaws.md) — medium
- 2026-07-21 [Plane PM tool has multi-tenant IDOR flaw](https://vorant.io/reports/53c802ca-3064-5d01-baeb-0519dc167fc6/plane-pm-tool-has-multi-tenant-idor-flaw.md) — medium
- 2026-07-21 [WordPress "wp2shell" RCE bug added to CISA KEV](https://vorant.io/reports/e6912209-2da4-5ea1-99a4-e1f7b80b5302/wordpress-wp2shell-rce-bug-added-to-cisa-kev.md) — high
- 2026-07-21 [Rockwell Studio 5000 Logix Designer flaws patched](https://vorant.io/reports/81280f38-6f59-5ed7-82df-de10dad37c87/rockwell-studio-5000-logix-designer-flaws-patched.md) — medium
- 2026-07-21 [Rockwell FactoryTalk JWT Auth Bypass Flaw](https://vorant.io/reports/c7e27405-a983-5276-8ebc-acdef44f9ed8/rockwell-factorytalk-jwt-auth-bypass-flaw.md) — medium
- 2026-07-21 [Siemens Opcenter X JWT auth bypass flaw](https://vorant.io/reports/7decb7e7-8a75-5502-91c8-92ca770fd1c1/siemens-opcenter-x-jwt-auth-bypass-flaw.md) — high
- 2026-07-21 [CISA adds four exploited flaws to KEV catalog](https://vorant.io/reports/68920200-2fda-546d-9c5e-08a50df30cb7/cisa-adds-four-exploited-flaws-to-kev-catalog.md) — medium
- 2026-07-21 [Rockwell ThinManager path traversal flaw patched](https://vorant.io/reports/f3c09746-eaba-5745-bde4-e291c50e04c6/rockwell-thinmanager-path-traversal-flaw-patched.md) — medium
- 2026-07-21 [Tycon TPDIN-Monitor-WEB2 auth bypass flaw](https://vorant.io/reports/193c1e3b-4f0d-534a-b4f6-867e6746606c/tycon-tpdin-monitor-web2-auth-bypass-flaw.md) — high
- 2026-07-21 [Siemens SIDIS SmartPlug hit by multiple CVEs](https://vorant.io/reports/787bad19-d371-5e80-bfa7-744e1e8ffabe/siemens-sidis-smartplug-hit-by-multiple-cves.md) — medium
- 2026-07-21 [Siemens RUGGEDCOM Hit by PAN-OS Flaws](https://vorant.io/reports/4b3ea87e-6ee2-5271-b5ca-7ef5dd76262e/siemens-ruggedcom-hit-by-pan-os-flaws.md) — medium
- 2026-07-21 [Siemens IAM Client Unquoted Path Flaw](https://vorant.io/reports/154d5e44-e4d7-5eae-9625-7ab64025fe42/siemens-iam-client-unquoted-path-flaw.md) — medium
- 2026-07-21 [Rockwell 1734 POINT I/O DoS Flaw Disclosed](https://vorant.io/reports/6235ee2a-23ca-52ba-a070-95b1b2af0a06/rockwell-1734-point-i-o-dos-flaw-disclosed.md) — medium
- 2026-07-21 [Rockwell 1718/1719-AENTR DoS flaw patched](https://vorant.io/reports/de077aa0-f6c4-57e0-a3a7-f59cc54b497b/rockwell-1718-1719-aentr-dos-flaw-patched.md) — low
- 2026-07-21 [Tenable Security Center gets patch for many flaws](https://vorant.io/reports/2afcbc0f-50c0-5f11-879d-c5ce1bbfe3a2/tenable-security-center-gets-patch-for-many-flaws.md) — medium
- 2026-07-20 [Windu CMS Patches Three Chained Vulnerabilities](https://vorant.io/reports/871f686f-3b06-53f9-85e5-1da395fe4088/windu-cms-patches-three-chained-vulnerabilities.md) — medium
- 2026-07-20 [WordPress Core RCE Chain Actively Exploited](https://vorant.io/reports/d83958ed-39d0-5d1f-a8dc-a4aefdcd8c03/wordpress-core-rce-chain-actively-exploited.md) — high
- 2026-07-20 [WordPress patches RCE chain, PoC public](https://vorant.io/reports/6c585812-3651-507a-a94a-7a9311e739d4/wordpress-patches-rce-chain-poc-public.md) — high
- 2026-07-20 [SonicWall SMA flaws exploited in the wild](https://vorant.io/reports/bbf2b447-8b27-585c-aaf8-9795850e100e/sonicwall-sma-flaws-exploited-in-the-wild.md) — high
- 2026-07-20 [WordPress Core flaws chain to unauthenticated RCE](https://vorant.io/reports/26b95a7c-b59e-5f74-8e8d-6c834e39f78b/wordpress-core-flaws-chain-to-unauthenticated-rce.md) — high
- 2026-07-19 [Nova ransomware claims Dephub as victim](https://vorant.io/reports/09ac5f48-28ff-5194-9725-d759495902a0/nova-ransomware-claims-dephub-as-victim.md) — medium
- 2026-07-17 [Iran suspected in SS7 tracking of US troops](https://vorant.io/reports/742c4e38-7041-5553-a377-77204397c40f/iran-suspected-in-ss7-tracking-of-us-troops.md) — high
- 2026-07-17 [Red Hat patches multiple Linux kernel flaws](https://vorant.io/reports/a3dca51b-1631-5b85-a0b7-8704d32e5b11/red-hat-patches-multiple-linux-kernel-flaws.md) — medium
- 2026-07-17 [Google Chrome patches multiple vulnerabilities](https://vorant.io/reports/129cbde4-fadd-55b5-ac7f-3480be151e1d/google-chrome-patches-multiple-vulnerabilities.md) — medium
- 2026-07-17 [Microsoft SharePoint flaws risk data exposure](https://vorant.io/reports/4057f964-2a8e-56fe-a0e3-99d19134579d/microsoft-sharepoint-flaws-risk-data-exposure.md) — medium
- 2026-07-17 [Microsoft Windows Patches Multiple Vulnerabilities](https://vorant.io/reports/89f424e1-4532-590d-a0a2-00bc7accae3c/microsoft-windows-patches-multiple-vulnerabilities.md) — medium
- 2026-07-16 [HTTP/2 flow-control flaw enables server DoS](https://vorant.io/reports/422c30b7-f786-5302-b1cc-97c2d039682d/http-2-flow-control-flaw-enables-server-dos.md) — medium
- 2026-07-16 [Bellingcat unmasks LeakedBB forum admin](https://vorant.io/reports/bdb6af90-903e-5dec-bf74-5e5112f386d0/bellingcat-unmasks-leakedbb-forum-admin.md) — low
- 2026-07-16 [SGLang expert-backup flaw enables unauth RCE](https://vorant.io/reports/56868fa0-f1ee-5636-b9e4-b2f5035c118a/sglang-expert-backup-flaw-enables-unauth-rce.md) — high
- 2026-07-16 [NASA cFS Health & Safety App DoS Flaw](https://vorant.io/reports/b38a5e06-b40b-548b-a94f-75fac58e0107/nasa-cfs-health-safety-app-dos-flaw.md) — medium
- 2026-07-16 [SALTO ProAccess Space fixes partition escalation flaw](https://vorant.io/reports/27aab0fa-0617-55a9-9ec3-c69229c569b9/salto-proaccess-space-fixes-partition-escalation-flaw.md) — medium
- 2026-07-16 [CISA adds Fortinet, SharePoint bugs to KEV](https://vorant.io/reports/48ede7bc-4086-53af-a6ef-75c80f2a5923/cisa-adds-fortinet-sharepoint-bugs-to-kev.md) — high
- 2026-07-16 [Rockwell Logix Controllers Get DoS Patches](https://vorant.io/reports/1e534277-5c17-58da-ba99-a1649f4cd562/rockwell-logix-controllers-get-dos-patches.md) — medium
- 2026-07-16 [Stored XSS Flaw Hits Rockwell DataMosaix](https://vorant.io/reports/5c2fb3ae-5e51-539e-982b-904b07274b66/stored-xss-flaw-hits-rockwell-datamosaix.md) — medium
- 2026-07-16 [Rockwell Flex 5000 Adapter DoS Flaw Patched](https://vorant.io/reports/3d55e669-df11-5317-8a87-fb16d853cf5c/rockwell-flex-5000-adapter-dos-flaw-patched.md) — medium
- 2026-07-16 [Rockwell Arena Simulation memory corruption flaws patched](https://vorant.io/reports/d27df395-3f43-516c-bcab-c07e1d54fdcf/rockwell-arena-simulation-memory-corruption-flaws-patched.md) — medium
- 2026-07-16 [AutomationDirect Productivity Suite has six flaws](https://vorant.io/reports/c2652d77-225a-546f-a51e-f174c4e076b3/automationdirect-productivity-suite-has-six-flaws.md) — medium
- 2026-07-16 [Siemens SICAM 8 patches four flaws](https://vorant.io/reports/5663cb7a-4f30-5293-9779-16dd32565428/siemens-sicam-8-patches-four-flaws.md) — medium
- 2026-07-16 [Rockwell 1756 modules face DoS flaw](https://vorant.io/reports/09b1b351-fb2a-5791-902b-93eb852c8271/rockwell-1756-modules-face-dos-flaw.md) — medium
- 2026-07-16 [ESET Products Vulnerable to Denial of Service](https://vorant.io/reports/e03e1474-b49a-5bbd-9788-2d7a3601c044/eset-products-vulnerable-to-denial-of-service.md) — low
- 2026-07-16 [Drupal patches XSS and data exposure flaws](https://vorant.io/reports/12cf676d-d25e-5801-9cc9-dc153f6ef85a/drupal-patches-xss-and-data-exposure-flaws.md) — medium
- 2026-07-16 [Cisco RoomOS patches multiple vulnerabilities](https://vorant.io/reports/8969a4cf-2b95-5dda-bc77-23f4a910e432/cisco-roomos-patches-multiple-vulnerabilities.md) — medium
- 2026-07-16 [Rails Sanitizer Flaw Enables Remote XSS](https://vorant.io/reports/5223574e-ec5d-5ee6-8976-9ab3b8ccf1b8/rails-sanitizer-flaw-enables-remote-xss.md) — medium
- 2026-07-16 [F5 patches multiple BIG-IP, NGINX flaws](https://vorant.io/reports/011df5ee-7643-5200-b7c5-3f02ef486290/f5-patches-multiple-big-ip-nginx-flaws.md) — medium
- 2026-07-16 [ANSSI warns of multiple Splunk vulnerabilities](https://vorant.io/reports/23c82bd0-21ac-597c-8453-18e5bff5778f/anssi-warns-of-multiple-splunk-vulnerabilities.md) — medium
- 2026-07-15 [Google Chrome Patches 14 Vulnerabilities](https://vorant.io/reports/4937f731-3c5e-50ef-85c0-e9d467cf21c7/google-chrome-patches-14-vulnerabilities.md) — medium
- 2026-07-15 [Pegatron tdeio64.sys driver flaw enables SYSTEM access](https://vorant.io/reports/e88d7641-dacd-58c7-b1e5-1ac680e9fb87/pegatron-tdeio64-sys-driver-flaw-enables-system-access.md) — medium
- 2026-07-15 [node-forge signature verification bypass flaws](https://vorant.io/reports/2433fb3d-a8e8-5ec3-9552-6dac25f3aee4/node-forge-signature-verification-bypass-flaws.md) — high
- 2026-07-15 [CERT Polska discloses ICU Boomerang flaws](https://vorant.io/reports/001cf80c-baed-5160-81cb-34bd580a4463/cert-polska-discloses-icu-boomerang-flaws.md) — medium
- 2026-07-15 [Fortinet patches multiple products across suite](https://vorant.io/reports/25b173f9-c1d9-5e8c-b15e-9f74e4ab5381/fortinet-patches-multiple-products-across-suite.md) — medium
- 2026-07-15 [Citrix Patches Flaws in Access Clients, XenCenter](https://vorant.io/reports/2076b8a8-bab9-501b-9eeb-6a072dac0b09/citrix-patches-flaws-in-access-clients-xencenter.md) — medium
- 2026-07-15 [Microsoft .NET patches 17 vulnerabilities](https://vorant.io/reports/ced12905-fa1c-5e21-ade3-4b843b8c7970/microsoft-net-patches-17-vulnerabilities.md) — medium
- 2026-07-15 [Tenable Nessus Agent flaw enables RCE](https://vorant.io/reports/06f9ff1c-9331-5cf9-98e9-2a0c3a32d942/tenable-nessus-agent-flaw-enables-rce.md) — medium
- 2026-07-15 [Veeam Backup & Replication privilege escalation flaw](https://vorant.io/reports/437bb01c-eb54-5bf5-8e6c-4cc448489f98/veeam-backup-replication-privilege-escalation-flaw.md) — medium
- 2026-07-15 [Microsoft Azure Linux patches dozens of CVEs](https://vorant.io/reports/4566b6d2-99f7-5aa8-9f85-8dd0b3789191/microsoft-azure-linux-patches-dozens-of-cves.md) — medium
- 2026-07-15 [Google Chrome Patches Multiple Vulnerabilities](https://vorant.io/reports/2f6f726e-93aa-5c52-849c-f7f90424f09d/google-chrome-patches-multiple-vulnerabilities.md) — medium
- 2026-07-15 [Active Exploitation Hits Microsoft CVE-2026-56164](https://vorant.io/reports/6bce7092-f132-578f-bd96-b9c0b942b24d/active-exploitation-hits-microsoft-cve-2026-56164.md) — high
- 2026-07-15 [Xen XAPI flaw allows security bypass](https://vorant.io/reports/15ac0ed1-59d9-590e-bcf3-83e877898e35/xen-xapi-flaw-allows-security-bypass.md) — medium
- 2026-07-15 [SonicWall SMA1000 flaws under active exploitation](https://vorant.io/reports/eb74b1c6-5aee-5e21-9f0e-2dbc045de514/sonicwall-sma1000-flaws-under-active-exploitation.md) — high
- 2026-07-15 [Apache Tomcat patches two security bypass flaws](https://vorant.io/reports/e216efc9-8009-576b-8a87-fb5c6cca46d7/apache-tomcat-patches-two-security-bypass-flaws.md) — medium
- 2026-07-15 [Mozilla Firefox patches multiple security flaws](https://vorant.io/reports/efcc91fc-5624-5a28-9128-8f132e6de95f/mozilla-firefox-patches-multiple-security-flaws.md) — medium
- 2026-07-15 [Schneider EcoStruxure Admin Expert security bypass flaw](https://vorant.io/reports/fea9f1f0-4a90-5080-93c5-804929d73c35/schneider-ecostruxure-admin-expert-security-bypass-flaw.md) — medium
- 2026-07-15 [Multiple Azure Vulnerabilities Patched by Microsoft](https://vorant.io/reports/9323de03-3687-5487-9db4-6d4022ca51fb/multiple-azure-vulnerabilities-patched-by-microsoft.md) — medium
- 2026-07-15 [SAP Patches Batch of July 2026 Flaws](https://vorant.io/reports/0df9f415-e649-56db-a52e-e4e76dd71694/sap-patches-batch-of-july-2026-flaws.md) — medium
- 2026-07-15 [SonicWall SMA 1000 flaws exploited in wild](https://vorant.io/reports/2b20ad33-1b09-5570-bdff-f47e475ae356/sonicwall-sma-1000-flaws-exploited-in-wild.md) — high
- 2026-07-15 [ESET Inspect Connector privilege escalation flaw](https://vorant.io/reports/d7e596a9-4b83-5e45-8fff-130a51bd8874/eset-inspect-connector-privilege-escalation-flaw.md) — medium
- 2026-07-15 [Progress LoadMaster patches RCE flaws](https://vorant.io/reports/ce77abe8-5467-5137-8a32-e3f025b95837/progress-loadmaster-patches-rce-flaws.md) — high
- 2026-07-14 [Microsoft Patches Two Actively Exploited Flaws](https://vorant.io/reports/dbfc71bd-ff36-5bf6-9d1e-caccc5fb3c0b/microsoft-patches-two-actively-exploited-flaws.md) — high

---

Full IOC sets, deployable detections, TAXII 2.1 feed and alerts: https://vorant.io/signup