Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
CISA Warns of Two Fortinet FortiSandbox Flaws Exploited to Execute Commands
Excerpt
The Cybersecurity and Infrastructure Security Agency (CISA) added two Fortinet FortiSandbox vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on July 16, 2026, confirming active exploitation of both flaws in the wild. Both vulnerabilities, tracked as CVE-2026-39808 and CVE-2026-25089, share a common root cause: OS command injection (CWE-78). This class of vulnerability arises when an application fails to properly sanitize user-supplied input before passing…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-39808 | Medium | Score 56/100 | First seen |
| CVE | CVE-2026-25089 | Medium | Score 60/100 | First seen |
IOC Relationship Graph
Building graph…