Latest

Jscrambler npm Compromise Shows Build Pipelines Need Runtime Controls

Ghost Phishing Shows Why Email Security Must Follow the Browser

Pakistani Police Intrusions Show Why Public-Sector Data Systems Are Strategic Targets

Bad Epoll Shows Linux Kernel LPEs Belong in the Patch Priority Queue

Fake Payment SDKs Show Why Dependency Risk Is Credential Risk

Critical UniFi Flaws Put Network Control Planes Back in the Patch Queue

Vidar Stealer Campaign Shows Why File Size and Fake Signatures Still Beat Weak Controls

ADFS Signing Keys Show Why Federation Servers Are Tier-Zero Identity Infrastructure

UAT-7810 Shows Edge Devices Are Becoming China-Nexus Relay Infrastructure

FortiBleed Shows Firewall Credentials Are Ransomware Fuel

NetNut and Popa Takedown Shows Residential Proxies Are Now Attack Infrastructure

Vect and TeamPCP Show Supply-Chain Credentials Are Ransomware Fuel

Ousaban Shows Banking Trojans Are Learning to Hide From Sandboxes

NUT upsmon Command Injection Shows UPS Monitoring Belongs in the Patch Queue

Indicator of Compromise

CVE-2026-3502

CVE Seen in 3 reports Watch this →

A CVE identifier for a specific software vulnerability referenced in this reporting.

Seen in these reports

Chinese Cyber Threat Intelligence · Apr 1, 2026

Operation TrueChaos: Chinese APT Exploits TrueConf Zero-Day CVE-2026-3502 to Target Southeast Asian Governments

Malware · Feb 4, 2026

PDFSider: The Stealthy Backdoor Targeting Fortune 100 Financial Institutions

Russian Cyber Threat Intelligence · Jan 7, 2024

Prior to Cyber Attack, Russian Attackers Spent Months Inside the Ukraine Telecoms Giant

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

Browse all indicators → Machine-readable feeds → Extract IOCs from text →