Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Critical N-able Passportal Bug Lets Malicious Sites Access Password Vaults
Excerpt
N-able has patched a critical vulnerability in its Passportal browser extension that could have allowed any malicious website or embedded iframe to steal long-lived authentication tokens and gain persistent access to a victim’s decrypted password vault. The flaw, tracked as CVE-2026-15580, affected Passportal extension version 3.49.5 on Google Chrome and Microsoft Edge. N-able released version 3.49.6 within 24 hours of receiving the report, closing an issue rated CVSS v4.0…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-15580 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…