Skip to content
Bulwark Black Bulwark Black LLC
Latest
JWR Phishing Framework Shows Why MFA Codes Are Now Live TargetsEvooo1Bot Shows Why Exposed Linux and Edge Devices Are Still High-Value TargetsMalware Crypting Services Show Why Behavioral Detection MattersPrivate Wireless Utility Networks Are Becoming OT Attack PathsKong Mesh Vulnerabilities Show Why Service Mesh Security Needs Control-Plane DisciplineGunra Ransomware Shows Why VPN Compromise Is an Incident, Not a Patch TicketCI Fortify Shows Why OT Isolation Must Be Engineered Before the IncidentLazarus Dream Job Campaign Turns Fake Recruiting Into a Windows Zero-Day IntrusionDeno Runtime Abuse Shows Why Developer Tooling Needs Security GovernanceAeternum Shows Why Blockchain-Based C2 Is a Practical Defense ProblemDeadLock Ransomware Shows Why Recovery Infrastructure Is Part of the Attack SurfaceUNC6671 Shows Why Helpdesk Vishing Is a Cloud Data-Theft ProblemVeloCloud Orchestrator RCE Shows Why SD-WAN Controllers Need Incident ResponseMSI Router Command-Injection Cluster Shows Why Edge Devices Need Exposure Control

Indicator of Compromise

CVE-2026-48558

CVE Seen in 2 reports Watch this →

A CVE identifier for a specific software vulnerability referenced in this reporting.

Seen in these reports

Cyber Security Blog · Jun 30, 2026

SimpleHelp Exploitation Shows RMM Is a Credential Control Plane
Cyber Security Blog · Jun 1, 2026

FortiClient EMS Exploitation Turns Endpoint Management Into an Infostealer Delivery System

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

0da123adf9251957a4b850a3f6bd6a753dd4892be176a84a18450e899534cc5e17e771c78430cc67e71d4547f8996a1a488e9d3f185[.]220[.]101[.]15192[.]42[.]116[.]142927bc31b4f8254c6b332fc03110a6373cad00ffa2ff9de427c26bb222017bb22f25ea1b622abf3212141af932c2ec4cbd6b2b5903c2a531121f691227d98cff338662fd0c4d750a0ba203a32b59f08183[.]138[.]53[.]1108c5b72906e8183037532afc3f4639931blackpointcyber[.]com CVE-2026-35616 d91c00fad521e76efa89715cca89db487d5676f2c767c883482f9c8f82bd383afd65051c61a904a304919c04a8c8633c001183ac73ac461cd4d9057946f02bf5 horizon3[.]ai hxxp://83[.]138[.]53[.]110/dl/p[.]exehxxp://83[.]138[.]53[.]110/service/save[.]phphxxps://blackpointcyber[.]com/blog/a-djinn-in-the-machine-taskweavers-node-js-intrusion-chain/hxxps://horizon3[.]ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/hxxps://simple-help[.]com/release-newshxxps://simple-help[.]com/security/simplehelp-security-update-2026-05simple-help[.]com
Browse all indicators → Machine-readable feeds → Extract IOCs from text →

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.