Toy Ghouls

Toy Ghouls Backdoor Uses HiveMQ and Element for C2 Rust supply chain attack on arrayref crate with proc-macro1 typosquat and DPRK infrastructure overlap

Rust supply chain attack on arrayref crate with proc-macro1 typosquat and DPRK infrastructure overlap

Toy Ghouls Backdoor Uses HiveMQ and Element for C2

Do Son September 4, 2026

At a glance Actor or group Toy Ghouls (aka Bearlyfy, Labubu, Laboo.boo, Feral Wolf) Activity type Custom...

GenieLocker Ransomware Targets Russian Manufacturers on Windows, Linux, and ESXi GenieLocker ransomware by Toy Ghouls targeting Russian manufacturing on Windows Linux ESXi

GenieLocker ransomware by Toy Ghouls targeting Russian manufacturing on Windows Linux ESXi

GenieLocker Ransomware Targets Russian Manufacturers on Windows, Linux, and ESXi

Do Son August 5, 2026

At a glance Field Detail Malware family GenieLocker (PE builds for Windows; ELF builds for Linux and...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-39364
Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-27540CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-76461CVSS 9.8
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an...
CISA KEV📅 Added to KEV: Sep 14, 2026
CVE-2026-51990
A critical remote code execution vulnerability in Sogou Input Method, one of the most widely used Chinese-language input...
Admin intel📅 Updated: Sep 12, 2026
CVE-2026-85706CVSS 10.0
GitLab has remediated an issue that, under certain conditions, an unauthenticated user could have read arbitrary files from...
Admin intelCISA KEV📅 Added to KEV: Sep 11, 2026📅 Updated: Sep 11, 2026
CVE-2026-42016CVSS 8.1
JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation...
Admin intelCISA KEV📅 Added to KEV: Sep 11, 2026📅 Updated: Sep 11, 2026
CVE-2026-42018CVSS 7.5
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially...
Admin intelCISA KEV📅 Added to KEV: Sep 11, 2026📅 Updated: Sep 11, 2026
CVE-2026-84869CVSS 9.9
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote...
CISA KEV📅 Added to KEV: Sep 11, 2026