Skip to content
Bulwark BlackBulwark Black LLC
Latest
Crime Stoppers Vendor Breach: Protect Confidentiality When Reporting Routes ChangeBinance Estimates $6.3 Billion Impact: Separate Frozen Funds From RecoverySignal RingRTC Hang-Up Flaw: Update the Client, Verify the Call EndsPillow Image-Processing Flaw: Patch the Worker Behind the UploadWasmtime on Arm: Check the Separate br_table Sandbox EscapeBlastmail Breach: Protect the Audience Data Behind Your NewsletterKeyDrift on Cisco SD-WAN: Patch the Entry Point, Investigate the ControllerPostiz Token Forgery: Patch the Publisher, Review Organization AccessBrotli Enters CISA KEV: Patch Node.js and Trace Every Decompression PathWasmtime Sandbox Escape: Patch the Engine Behind Your Wasm WorkloadsQuest Quanum Incident: Protect Patient Data While Keeping Orders MovingPulsar Token Bypass: Check Anonymous Fallback and Patch BrokersCisco Expressway Root RCE: Patch the Cluster and Check Service ReachabilityPulsar Manager Is Retired: Remove the Console and Recover Cluster Credentials

IOC Passport

CVE-2025-14174

CVEArticle-derived observationArchived observationReported in 2 articlesWatch this →

A CVE identifier referenced in published reporting. It is vulnerability context, not a malicious indicator or feed verdict.

This context-only value aged beyond its 90-day contextual reporting window. No applicable exact provider check exists for this type, so placement is based on reporting recency alone. Archive-cleared or archived does not mean clean, inactive, benign, remediated, resolved, or safe, and this lifecycle does not change current verified-feed admission.

Current verified-feed status

Checking live guard…

Article reporting and current malicious-feed admission are evaluated separately.

First reported
Last reported
Article count
2
Admission policy
Context only
Research lifecycle
Archived · window ended

Article reporting history

These dates are report publication dates, not provider sightings or proof of malicious activity.

Malware·Mar 21, 2026

DarkSword iOS Exploit Kit: Russian Hackers Weaponize Six Vulnerabilities for Full iPhone Takeover

Threat Intelligence·Feb 16, 2026

CVE-2026-20700: Apple Patches First Zero-Day of 2026 After Extremely Sophisticated Targeted Attacks

Related indicators

Observables that appear alongside this one in the same reporting. Co-occurrence can suggest shared infrastructure, but it does not establish common ownership, campaign identity, or actor attribution.

CVE-2025-43529CVE-2026-207002e5a56beb63f21d9347310412ae6efb29fd3db2d3a3fc0798865a29a3c578d3562[.]72[.]21[.]1072[.]60[.]98[.]48cdncounter[.]netCVE-2025-31277CVE-2025-43510CVE-2025-43520e5[.]malaymoil[.]comhxxps://static[.]cdncounter[.]net/assets/index[.]htmlhxxps://static[.]cdncounter[.]net/widgets[.]js?uhfiu27fajf2948fjfefaa42"></script&gtmalaymoil[.]comsahibndn[.]ioshapelie[.]comsqwas[.]shapelie[.]comstatic[.]cdncounter[.]netsystemgroup[.]com
Browse all indicators →IOC Archive →Machine-readable feeds →Extract IOCs from text →

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.