SOC Prime Blog

ID: a386702a-200f-5d8e-a45a-1a90d3aff4e9

STIX ID: identity--a386702a-200f-5d8e-a45a-1a90d3aff4e9

Feed Type: rss

Earliest post: 2025-10-29

Latest post: 2026-08-07

Detection engineering insights, threat hunting guidance, and real-time coverage of emerging threats powered by the SOC Prime community.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

08/11/2026

Title	Date Published ↓	Describes Incident	Author	Visible
Hugging Face Breach: OpenAI Agent Abused Exposed Credentials Across Four Services	2026-08-07	True	SOC Prime Team	True
CVE-2026-18577: N-able N-central Authentication Bypass Lets Attackers Reach Managed Endpoints	2026-08-04	True	SOC Prime Team	True
CVE-2026-20316: Actively Exploited Cisco FMC Flaw Exposes Sensitive Data	2026-07-30	True	SOC Prime Team	True
CVE-2026-66066: Critical Rails Flaw Exposes Server Files via Image Uploads	2026-07-30	True	SOC Prime Team	True
CVE-2026-47876: Critical VMware ESXi VM Escape Flaw Enables Host Code Execution	2026-07-30	True	SOC Prime Team	True
CVE-2026-14266: 7-Zip Heap Overflow Flaw Can Lead to Remote Code Execution	2026-07-23	True	SOC Prime Team	True
CVE-2026-64600: RefluXFS Linux Kernel Flaw Can Lead to Root Privilege Escalation	2026-07-23	True	SOC Prime Team	True
CVE-2026-42533: Critical NGINX Map Regex Flaw Can Trigger Heap Buffer Overflow and Possible RCE	2026-07-16	True	SOC Prime Team	True
CVE-2026-56164 and CVE-2026-56155: Two Exploited Microsoft Zero-Days Put SharePoint and AD FS at Risk	2026-07-16	True	SOC Prime Team	True
CVE-2026-15410 and CVE-2026-15409: SonicWall SMA 1000 Zero-Days Exploited in the Wild	2026-07-16	True	SOC Prime Team	True
CVE-2026-42530: Critical NGINX HTTP/3 Flaw Can Trigger DoS and Possible RCE	2026-06-19	True	SOC Prime Team	True
CVE-2026-20262: Cisco SD-WAN Manager Zero-Day Can Lead to Root Privilege Escalation	2026-06-16	True	SOC Prime Team	True
CVE-2026-11645: Chrome Zero-Day Vulnerability Exploited in the Wild	2026-06-09	True	SOC Prime Team	True
CVE-2026-50751: Check Point VPN Authentication Bypass Exploited in Targeted Attacks	2026-06-09	True	SOC Prime Team	True
CVE-2026-20245: Cisco SD-WAN Manager Zero-Day Enables Root Command Execution	2026-06-05	True	SOC Prime Team	True
CVE-2026-49975: HTTP/2 Bomb Attack Can Knock Web Servers Offline in Seconds	2026-06-05	True	SOC Prime Team	True
CVE-2026-48095: 7-Zip Heap Buffer Overflow Can Lead to Code Execution	2026-05-26	True	SOC Prime Team	True
UAC-0057 Attack Detection: OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES Fuel Phishing Campaigns Against Ukrainian State Organizations	2026-05-25	True	SOC Prime Team	True
CVE-2026-9082: Highly Critical Drupal Core SQL Injection Flaw Threatens PostgreSQL Sites	2026-05-22	True	SOC Prime Team	True
CVE-2026-45585: YellowKey BitLocker Bypass Exposes Encrypted Data on Windows Devices	2026-05-22	True	SOC Prime Team	True
CVE-2026-20182: Critical Authentication Bypass in Cisco SD-WAN Can Grant Admin Access	2026-05-15	True	SOC Prime Team	True
CVE-2026-42897: Exchange Server OWA Spoofing Flaw Exploited via Crafted Email	2026-05-15	True	SOC Prime Team	True
CVE-2026-42945: 18-Year-Old NGINX Rewrite Flaw May Enable Unauthenticated RCE	2026-05-14	True	SOC Prime Team	True
CVE-2026-46300: Fragnesia Linux Kernel Flaw Grants Root via Page Cache Corruption	2026-05-14	True	SOC Prime Team	True
CVE-2026-43500 and CVE-2026-43284: Dirty Frag Linux Privilege Escalation Flaw Raises Post-Compromise Risk	2026-05-11	True	SOC Prime Team	True
CVE-2026-23918: Critical Apache HTTP/2 Flaw Can Trigger DoS and Possible RCE	2026-05-06	True	SOC Prime Team	True
CVE-2026-23918: Critical Apache HTTP/2 Flaw Can Trigger DoS and Possible RCE	2026-05-06	True	SOC Prime Team	True
CVE-2026-0300: Palo Alto PAN-OS Zero-Day Enables Root RCE on Exposed Firewalls	2026-05-06	True	SOC Prime Team	True
CVE-2026-0300: Palo Alto PAN-OS Zero-Day Enables Root RCE on Exposed Firewalls	2026-05-06	True	SOC Prime Team	True
CVE-2026-41940: Critical cPanel & WHM Authentication Bypass Exposes Hosting Servers to Admin Takeover	2026-04-30	True	SOC Prime Team	True
CVE-2026-28950: Apple Fixes iOS Flaw That Retained Deleted Notification Data	2026-04-23	True	SOC Prime Team	True
CVE-2026-40372: Critical ASP.NET Core Flaw May Let Attackers Gain SYSTEM Privileges	2026-04-23	True	SOC Prime Team	True
UAC-0247 Attack Detection: AGINGFLY Malware Targets Hospitals, Local Governments, and FPV Operators in Ukraine	2026-04-16	True	SOC Prime Team	True
UAC-0255 Attack Detection: Threat Actors Impersonate CERT-UA to Infect Ukrainian Public and Private Sector Organizations With AGEWHEEZE RAT	2026-04-01	True	Daryna Olyniychuk	True
CVE-2026-20643: Vulnerability in WebKit Navigation API May Bypass Same Origin Policy	2026-03-18	True	Daryna Olyniychuk	True
CVE-2026-3910: Chrome V8 Zero-Day Used for In-the-Wild Attacks	2026-03-13	True	Daryna Olyniychuk	True
CVE-2026-21262: SQL Server Zero-Day Fixed in Microsoft’s March Patch Tuesday Release	2026-03-12	True	Daryna Olyniychuk	True
CVE-2026-21385: Google Patches Qualcomm Zero-Day Exploited in Targeted Android Attacks	2026-03-04	True	Daryna Olyniychuk	True
UAC-0252 Attack Detection: SHADOWSNIFF and SALATSTEALER Fuel Phishing Campaigns in Ukraine	2026-03-03	True	Daryna Olyniychuk	True
CVE-2026-20127: Cisco SD-WAN Zero-Day Exploited Since 2023	2026-02-26	True	Daryna Olyniychuk	True
CVE-2026-22769: Critical Dell RecoverPoint Zero-Day Exploited in the Wild	2026-02-18	True	Daryna Olyniychuk	True
CVE-2026-2441: Google Patches Chrome Zero-Day Exploited in the Wild	2026-02-16	True	Daryna Olyniychuk	True
CVE-2026-20700: Apple Patches Zero-Day Exploited in Sophisticated Cyber Attacks	2026-02-12	True	Daryna Olyniychuk	True
CVE-2026-20841: Windows Notepad RCE Fixed in Microsoft’s February Patch Tuesday Release	2026-02-11	True	Daryna Olyniychuk	True
CVE-2026-21643: Critical FortiClient EMS Vulnerability Enables Unauthenticated Remote Code Execution	2026-02-10	True	Daryna Olyniychuk	True
UAC-0001 (APT28) Attack Detection: russia-Backed Actor Actively Exploits CVE-2026-21509 Targeting Ukraine and the EU	2026-02-02	True	Daryna Olyniychuk	True
CVE-2025-15467: OpenSSL Vulnerability Leads to Denial-of-Service, Remote Code Execution	2026-01-29	True	Daryna Olyniychuk	True
CVE-2026-24858: FortiOS SSO Zero-Day Exploited in the Wild	2026-01-28	True	Daryna Olyniychuk	True
CVE-2026-21509: Actively Exploited Microsoft Office Zero-Day Forces Emergency Patch	2026-01-27	True	Daryna Olyniychuk	True
CVE-2026-24061: Decade-Old Vulnerability in GNU InetUtils telnetd Enables Remote Root Access	2026-01-23	True	Daryna Olyniychuk	True