Skip to content
Bulwark BlackBulwark Black LLC
Latest
AI Agent Swarms Turn Security Basics Into Cost ControlsQ3 Attack Trends Show Trusted Paths Are Becoming the Real TargetFortiBleed Shows Why VPN Credential Compromise Needs Full Incident ResponseGitHub Enterprise SSRF Shows Why Secret Scanning Needs Network GuardrailsBlinder Tunnel Shows How Developer Trust Becomes Critical Infrastructure RiskBrowser Detection and Response Shows Why the Browser Is Now a Security Blind SpotApache Struts REST Plugin Flaws Show Why Legacy Java Apps Need Exposure ReviewClingSTUN Shows Why IoT Edge Devices Need Real Egress MonitoringApache Thrift 61-CVE Patch Shows Why RPC Frameworks Need InventoryNIST OT Zero Trust Guidance Shows Segmentation Must Reach Below Level 3Milk Dragon Shows Social Commerce Phishing Needs Identity and Payment ControlsCisco SD-WAN Auth Bypass Shows Edge Control Planes Need Emergency ReviewRansomware Data Theft Surge Shows Why Exfiltration Defense Comes FirstLive Exposed Credentials Show Why Secret Scanning Must End in Revocation

IOC Passport

CVE-2026-31431

CVEArticle-derived observationCurrent reporting windowReported in 6 articlesWatch this →

A CVE identifier referenced in published reporting. It is vulnerability context, not a malicious indicator or feed verdict.

This value remains inside its 90-day contextual reporting window. Current reporting status is separate from verified-feed admission. Archive-cleared or archived does not mean clean, inactive, benign, remediated, resolved, or safe, and this lifecycle does not change current verified-feed admission.

Current verified-feed status

Checking live guard…

Article reporting and current malicious-feed admission are evaluated separately.

First reported
Last reported
Article count
6
Admission policy
Context only
Research lifecycle
Current

Article reporting history

These dates are report publication dates, not provider sightings or proof of malicious activity.

General CTI·Jul 29, 2026

Autonomous AI Agent Espionage Shows Why Post-Compromise Speed Matters

Cyber Security Blog·Jun 5, 2026

PAN-OS GlobalProtect Exploitation Shows VPN Access Needs Log Review, Not Just Patching

Cyber Security Blog·May 8, 2026

Dirty Frag Turns Linux Footholds Into Root: What Defenders Should Do Now

Cyber Security Blog·May 7, 2026

PAN-OS Captive Portal Zero-Day Shows Why Internet-Facing Edge Devices Need Immediate Review

Chinese Cyber Threat Intelligence·Feb 23, 2026

Unit 42 Exposes Active Exploitation of BeyondTrust CVE-2026-1731 with VShell and SparkRAT Backdoors

Operational Technology (OT)·Jan 31, 2026

Iconics Suite SCADA Vulnerability Enables Denial-of-Service Through Privileged File Operations

Related indicators

Observables that appear alongside this one in the same reporting. Co-occurrence can suggest shared infrastructure, but it does not establish common ownership, campaign identity, or actor attribution.

CVE-2023-33538CVE-2025-0921CVE-2025-14847CVE-2025-23304CVE-2025-55182CVE-2025-66478CVE-2026-0257CVE-2026-0300CVE-2026-1281CVE-2026-1340CVE-2026-1731CVE-2026-22584CVE-2026-43284CVE-2026-435000ecc867ce916d01640d76ec03de24d1d23585eb582e9c48a0364c62a590548ac0f8c905aa25c86f85454acb7e77bf5c50220c2a82e5b69a33741e55c8a85f2fc103[.]97[.]0[.]57104[.]207[.]144[.]154118[.]107[.]222[.]232134[.]122[.]13[.]34136[.]0[.]8[.]48138[.]197[.]14[.]95142[.]111[.]152[.]50144[.]172[.]103[.]200146[.]19[.]216[.]119146[.]19[.]216[.]120146[.]19[.]216[.]125146[.]70[.]100[.]69149[.]104[.]66[.]84155[.]2[.]215[.]64178[.]128[.]212[.]209179[.]43[.]146[.]42179[.]43[.]172[.]213185[.]195[.]232[.]139198[.]12[.]106[.]60202[.]144[.]192[.]47202[.]181[.]27[.]11523[.]128[.]228[.]623[.]162[.]40[.]1872a4cb412efa93fed7c3b3b3e49d6247b11a95ce9fddf71d9fe9db8e5f0068e0d
Browse all indicators →IOC Archive →Machine-readable feeds →Extract IOCs from text →

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.