Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
CVE-2026-104286: Critical FortiMail Zero-Day Exploited for Unauthenticated File Writes
Excerpt
Fortinet has disclosed a critical FortiMail zero-day vulnerability that attackers are already exploiting in the wild. Tracked as CVE-2026-104286 and rated 9.8 on the CVSS scale, the flaw enables an unauthenticated remote attacker to write arbitrary files to the underlying system by sending specially crafted HTTP or HTTPS requests. The vulnerability poses a significant risk because FortiMail appliances are often positioned at the enterprise perimeter to protect email…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 79.141.169.187 | High | Score 68/100 | First seen |
| CVE | CVE-2026-88779 | High | Score 79/100 | First seen |
| CVE | CVE-2026-104286 | High | Score 66/100 | First seen |
IOC Relationship Graph
Building graph…