Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in Chained Attacks
Excerpt
Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in Chained Attacks Ivanti released fixes on October 13, 2026, for CVE-2026-104935, an Ivanti Connect Secure zero-day that attackers exploited before a patch existed. Volexity, which uncovered the activity during an incident investigation, tracks the attacker as UTA0576. According to the published analysis , the actor chained three vulnerabilities to move from an unauthenticated web request to root-level code execution…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-104935 | High | Score 66/100 | First seen |
| IP | 108.165.147.64 | Medium | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…