Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE44 IOCs
Weekly Threat Landscape Digest – Week 37
Threat Actors
Diamond Model
Adversary(2)
Infrastructure
Capability
Victim
Indicators of Compromise
Indicators of Compromise44
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-84388 exfiltrationexploitintel-blog | Medium | 54 | Sep 9, 26 |
| CVE | CVE-2026-85046 exploitintel-blogmalware | High | 69 | Sep 4, 26 |
| CVE | CVE-2026-0304 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-5079 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-64531 exploitintel-blogmalware | Medium | 57 | Aug 5, 26 |
| CVE | CVE-2026-12648 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-78510 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-12744 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-26084 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-80238 exploitintel-blogvulnerability | Medium | 54 | Sep 8, 26 |
| CVE | CVE-2026-12745 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2025-20701 exploitintel-blogmalware | Medium | 56 | Jun 20, 26 |
| CVE | CVE-2026-0308 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-12651 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-52914 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-75650 exploitintel-blogvulnerability | Medium | 54 | Sep 9, 26 |
| CVE | CVE-2026-69518 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-40984 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-77493 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-42527 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-42016 exploitintel-blogmalware | High | 59 | Sep 11, 26 |
| CVE | CVE-2026-12645 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-86478 exploitintel-blogmalware | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-20079 exploitintel-blogmalware | Medium | 53 | Jul 31, 26 |
| CVE | CVE-2026-85880 exploitintel-blogresearched | Medium | 58 | Sep 9, 26 |
| CVE | CVE-2026-61410 aptespionageexploit | Medium | 54 | Sep 8, 26 |
| CVE | CVE-2026-86480 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-12650 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-84390 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-82067 exploitintel-blogmalware | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-80172 aptespionageexploit | Medium | 54 | Sep 8, 26 |
| CVE | CVE-2026-42018 exploitintel-blogmalware | High | 59 | Sep 11, 26 |
| CVE | CVE-2026-75754 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-84393 exploitintel-blogproxy | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-4201 exploitintel-blogmalware | Medium | 54 | Sep 11, 26 |
| CVE | CVE-2026-81963 exploitintel-blogvulnerability | Medium | 54 | Sep 10, 26 |
| CVE | CVE-2026-78509 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-59869 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-44432 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-0310 exploitintel-blogvulnerability | High | 59 | Sep 10, 26 |
| CVE | CVE-2026-82329 exploitintel-blogmalware | High | 61 | Sep 3, 26 |
| CVE | CVE-2026-20293 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
| CVE | CVE-2026-87491 exploitintel-blogvulnerability | High | 59 | Sep 10, 26 |
| CVE | CVE-2026-0309 exploitintel-blogvulnerability | Medium | 51 | Sep 11, 26 |
IOC Relationship Graph
IOC Relationship Graph44 total IOCs
CVE