Skip to content
Bulwark Black Bulwark Black LLC
Latest
WeedHack Shows SEO Poisoning Is Malware Delivery InfrastructureAI Agent Incidents Need Task-Scoped Incident ResponseSDLC Supply-Chain Attacks Show Why Developer Tools Need Runtime ControlsRussian Auth-Flow Phishing Shows MFA Can Be Bypassed Without ExploitsFake AI Tools Show Brand Trust Has Become Malware DeliveryStopAndProtect Shows Why WordPress Sites Are Attack InfrastructureMacSync Stealer Shows Why Behavioral Pivots Beat Rotating DomainsPurpleDelta Shows Why Remote Hiring Is Now an Insider-Risk ControlGitLab GraphQL Flaw Shows Why DevSecOps Platforms Need Emergency Patch RunbooksForminator RCE Shows Why WordPress Plugin Risk Needs Runtime ControlsC2Looper Shows Why GitHub-Based C2 Belongs in Ransomware TriageVMware vCenter Exploitation Shows Why Patching Is Not Incident ClosureRansomware’s Long Tail Means Defenders Need Faster TriageAzure Directory Dumps Show Why Identity Data Is Attack Infrastructure

Indicator of Compromise

CVE-2026-18556

CVE Seen in 2 reports Watch this →

A CVE identifier for a specific software vulnerability referenced in this reporting.

Seen in these reports

Cyber Security Blog · Aug 2, 2026

N-able N-central Exploitation Shows Why MSP Tools Are Control-Plane Risk
Cyber Security Blog · Jun 1, 2026

FortiClient EMS Exploitation Turns Endpoint Management Into an Infostealer Delivery System

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

0da123adf9251957a4b850a3f6bd6a753dd4892be176a84a18450e899534cc5e173[.]249[.]252[.]20017e771c78430cc67e71d4547f8996a1a488e9d3f185[.]220[.]101[.]15192[.]42[.]116[.]142927bc31b4f8254c6b332fc03110a6373cad00ffa2ff9de427c26bb222017bb22f25ea1b622abf3212141af932c2ec4cbd6b2b5903c2a531121f691227d98cff338662fd0c4d750a0ba203a32b59f08137[.]19[.]210[.]3268[.]235[.]46[.]21483[.]138[.]53[.]11087[.]249[.]138[.]348c5b72906e8183037532afc3f4639931 CVE-2026-0257 CVE-2026-18577CVE-2026-28299CVE-2026-28323 CVE-2026-35616 CVE-2026-50656d91c00fad521e76efa89715cca89db487d5676f2c767c883482f9c8f82bd383afd65051c61a904a304919c04a8c8633c001183ac73ac461cd4d9057946f02bf5hxxp://83[.]138[.]53[.]110/dl/p[.]exehxxp://83[.]138[.]53[.]110/service/save[.]phphxxps://www[.]cve[.]org/CVERecord?id=CVE-2026-18556 www[.]cve[.]org
Browse all indicators → Machine-readable feeds → Extract IOCs from text →

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.