Skip to content
Bulwark Black Bulwark Black LLC
Latest
Langflow RCE Shows Why AI Workflow Tools Need Cloud-Grade IsolationBINDCLOAK Shows Why C2 Detection Needs Message-Level VisibilityPasskey Attacks Show Why Passwordless Still Needs Endpoint DefenseDPRK npm Compromises Show Why Dependency Trust Is Now Identity RiskN-able N-central Exploitation Shows Why MSP Tools Are Control-Plane RiskHOLLOWGRAPH Shows Why Microsoft 365 Is Now Part of the C2 BattlefieldFuyao Android TV Botnet Shows Why Cheap Streaming Sticks Are Business Network RiskSonicWall SMA Exploit Chain Shows Why VPN Appliances Need Incident Response, Not Just PatchingAdform Script Compromise Shows Why Third-Party Tags Need Supply-Chain ControlsCaptiveCrunch Shows Why Travel Wi-Fi Is Now an Identity Attack SurfaceXCSSET v40 Shows Why Developer Macs Are Supply-Chain Infrastructure84 4G/5G Core Flaws Show Why Telecom Trust Zones Need Zero TrustAstaroth WhatsApp Web Spambot Shows Browser Sessions Are Distribution InfrastructureTA488 Turns Outlook Web Access Into a Stealthy Persistence Layer

Indicator of Compromise

CVE-2026-21509

CVE Seen in 3 reports Watch this →

A CVE identifier for a specific software vulnerability referenced in this reporting.

Seen in these reports

Research Papers · Mar 26, 2026

Pawn Storm Deploys PRISMEX Malware Suite Against Ukrainian Defense Supply Chain and NATO Allies
Russian Cyber Threat Intelligence · Mar 3, 2026

APT28 Exploited CVE-2026-21513 MSHTML Zero-Day as Attack Vector Before February Patch Tuesday
Russian Cyber Threat Intelligence · Feb 9, 2026

APT28 Exploits CVE-2026-21509 in Operation Neusploit: Stealing Emails with MiniDoor Backdoor

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

wellnesscaremed[.]com CVE-2026-21513 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 claude[.]ai d47261e52335b516a777da368208ee91D577c4a264fee27084ddf717441eb89f714972a5d788d85335e20bb1f173d4d0494629d36083dddcda1c3e92f69e6ca0e4f4823525905cb6969a44addropbox[.]come4a5c4b205e1b80dc20d9a2fb4126d06e52a9f004f4359ea0f8f9c6eb91731ed78e5c4d3ea6615942f2c23dba7810a6f7d69e2daee0b44346db028a621d1dec99f429823egest[.]filen[.]iof05d0b13c633ad889334781cf4091d3e
Browse all indicators → Machine-readable feeds → Extract IOCs from text →

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.