Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
CVEMediumSignal 56/100EPSS 0.1%
CVE-2025-1055
First Seen
Jun 17, 2026
Last Seen
Oct 10, 2026
Found in 3 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
CVE
Known vulnerability being actively exploited in the wild.
MISP Category
vulnerability
EPSS Score
0.14%
EPSS Percentile
3.9th
Confidence
72%
Signal Score
56 / 100
IDS Rule
No
CVE Intelligence
Exploit Probability0.14%
3.9th percentile of all CVEs
Threat Context
Threat Actors34
Malware Families45
Tags
Feed Intelligence Summary
3 reports72% confidence
PO
PolySwarm
3d ago
32 IOCs in report
CP
Cyber Press
Jun 16, 2026
14 IOCs in report
Activity Timeline
Oct 9Jun 16
Threat Activity Heatmap
· Peak: 2026-06-16LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
1
Minimal
30d
2
Minimal
3mo
2
Minimal
Threat ScoreMedium Risk
56
SIGNAL
Signal Score
72%
Confidence
3
Reports
First seenJun 17, 2026
Last seenOct 10, 2026
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 3 months ago · Last seen 3 days ago
Appeared in 3 threat reports from 3 sources
Associated with: Scattered Spider, BlackCat, APT41, Akira, Royal, Conti, LockBit, Killnet, TA577, REvil, Gamaredon, APT38, APT28, APT33, APT35, Cl0p, DEV-0569, APT37, APT29, APT34, Salt Typhoon, FIN8, MuddyWater, UNC1549, Turla, Hive, Play, Kimsuky, Black Basta, Volt Typhoon, Ember Bear, DarkSide, Lazarus Group, Sandworm
Used by malware: Hive, CrackMapExec, Chisel, Play, Remcos, Akira, Rhysida, Bumblebee, LockBit, Medusa, Stealc, Black Basta, Mirai, QakBot, Vidar, XWorm, BlackCat, AsyncRAT, Conti, Royal, DarkSide, PsExec, Havoc, META Stealer, Cobalt Strike, Gh0st RAT, SocGholish, Rhadamanthys, Emotet, Lumma, Mythic, Ursnif, BazarLoader, AcidRain, INC Ransom, NotPetya, IcedID, RedLine, PlugX, CaddyWiper, REvil, Brute Ratel, WhisperGate, Cl0p, HermeticWiper