Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
CISA Warns of Exploited SolarWinds Serv-U Vulnerability
Threat Actors
Malware Families
Excerpt
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-28318 to its Known Exploited Vulnerabilities (KEV) catalog after confirming that threat actors are actively targeting a high-severity flaw in SolarWinds Serv-U to remotely crash file transfer servers without requiring authentication. The flaw CVE-2026-28318 is classified as an uncontrolled resource consumption flaw (CWE-400) in SolarWinds Serv-U , the company’s widely deployed Windows…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-28318 | Medium | Score 54/100 | First seen |
| CVE | CVE-2021-35211 | Medium | Score 51/100 | First seen |
| CVE | CVE-2024-28995 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…