Yinhu

Silver Fox Fake Software Installers Disable Windows Defender Spirals ransomware double extortion attack chain from IIS web shell to network encryption

Spirals ransomware double extortion attack chain from IIS web shell to network encryption

Silver Fox Fake Software Installers Disable Windows Defender

Do Son September 7, 2026

At a glance Campaign Counterfeit software-download / fake installer campaign Threat actor Consistent with Silver Fox (Yinhu);...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-86218CVSS 10.0
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67278CVSS 6.3
MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. Because its trust store includes an e=3 root...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67279CVSS 6.9
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67281CVSS 8.7
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-86060CVSS 9.2
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character,...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67277CVSS 8.8
RouterOS accepts a \"related\" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67276CVSS 9.2
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-14894CVSS 9.8
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload...
Admin intel📅 Updated: Sep 4, 2026