Skip to content
Bulwark BlackBulwark Black LLC
Latest
Wasmtime Sandbox Escape: Patch the Engine Behind Your Wasm WorkloadsQuest Quanum Incident: Protect Patient Data While Keeping Orders MovingPulsar Token Bypass: Check Anonymous Fallback and Patch BrokersCisco Expressway Root RCE: Patch the Cluster and Check Service ReachabilityPulsar Manager Is Retired: Remove the Console and Recover Cluster CredentialsArista VCO Exploitation: Patch the Orchestrator, Review Every Portal RoleSafePay Warning: Prove Your Backups Can Survive an Administrator CompromiseTeamUpdraft Compromise: Check Every Connected WordPress Site for PersistenceRailway Secrets Incident: Rotate Credentials, Then Check What They Could ReachLiteLLM 1.107.0 Compromise: Rebuild the Environment, Recover the CredentialsGitLab Regex RCE: Patch the Server, Verify the Delivery ChaineMudhra CA Key Compromise: Check the Trust Stores Beyond Your BrowserPHP2Shell: Patch the Runtime Behind Your WebsitesTrusted Notifications, Untrusted Instructions: Close the Email Content Gap

IOC Passport

CVE-2026-31431

CVEArticle-derived observationArchived observationReported in 6 articlesWatch this →

A CVE identifier referenced in published reporting. It is vulnerability context, not a malicious indicator or feed verdict.

This context-only value aged beyond its 90-day contextual reporting window. No applicable exact provider check exists for this type, so placement is based on reporting recency alone. Archive-cleared or archived does not mean clean, inactive, benign, remediated, resolved, or safe, and this lifecycle does not change current verified-feed admission.

Current verified-feed status

Checking live guard…

Article reporting and current malicious-feed admission are evaluated separately.

First reported
Last reported
Article count
6
Admission policy
Context only
Research lifecycle
Archived · window ended

Article reporting history

These dates are report publication dates, not provider sightings or proof of malicious activity.

General CTI·Jul 29, 2026

Autonomous AI Agent Espionage Shows Why Post-Compromise Speed Matters

Cyber Security Blog·Jun 5, 2026

PAN-OS GlobalProtect Exploitation Shows VPN Access Needs Log Review, Not Just Patching

Cyber Security Blog·May 8, 2026

Dirty Frag Turns Linux Footholds Into Root: What Defenders Should Do Now

Cyber Security Blog·May 7, 2026

PAN-OS Captive Portal Zero-Day Shows Why Internet-Facing Edge Devices Need Immediate Review

Chinese Cyber Threat Intelligence·Feb 23, 2026

Unit 42 Exposes Active Exploitation of BeyondTrust CVE-2026-1731 with VShell and SparkRAT Backdoors

Operational Technology (OT)·Jan 31, 2026

Iconics Suite SCADA Vulnerability Enables Denial-of-Service Through Privileged File Operations

Related indicators

Observables that appear alongside this one in the same reporting. Co-occurrence can suggest shared infrastructure, but it does not establish common ownership, campaign identity, or actor attribution.

CVE-2023-33538CVE-2025-0921CVE-2025-14847CVE-2025-23304CVE-2025-55182CVE-2025-66478CVE-2026-0257CVE-2026-0300CVE-2026-1281CVE-2026-1340CVE-2026-1731CVE-2026-22584CVE-2026-43284CVE-2026-435000ecc867ce916d01640d76ec03de24d1d23585eb582e9c48a0364c62a590548ac0f8c905aa25c86f85454acb7e77bf5c50220c2a82e5b69a33741e55c8a85f2fc103[.]97[.]0[.]57104[.]207[.]144[.]154118[.]107[.]222[.]232134[.]122[.]13[.]34136[.]0[.]8[.]48138[.]197[.]14[.]95142[.]111[.]152[.]50144[.]172[.]103[.]200146[.]19[.]216[.]119146[.]19[.]216[.]120146[.]19[.]216[.]125146[.]70[.]100[.]69149[.]104[.]66[.]84155[.]2[.]215[.]64178[.]128[.]212[.]209179[.]43[.]146[.]42179[.]43[.]172[.]213185[.]195[.]232[.]139198[.]12[.]106[.]60202[.]144[.]192[.]47202[.]181[.]27[.]11523[.]128[.]228[.]623[.]162[.]40[.]1872a4cb412efa93fed7c3b3b3e49d6247b11a95ce9fddf71d9fe9db8e5f0068e0d
Browse all indicators →IOC Archive →Machine-readable feeds →Extract IOCs from text →

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.