Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
Mind the (Patch) Gap , Part 3: Analysis with Volexity Volcano, Threat Intel, and MCP
Excerpt
Last month, Volexity published two blog posts in its Mind the (Patch) Gap series. The series details Volexity’s discovery of multiple Chinese threat actors simultaneously using zero-day exploits in Google Chrome and Microsoft Windows in campaigns that, if successful, would download and run malware on an exploited system. Those posts covered technical details of the exploits and malware Volexity observed, along with general detection methods for each case. Behind those…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-85046 | High | Score 79/100 | First seen |
| URL | https://cloud.shinewrist.net/foo/Files1.html | High | Score 58/100 | First seen |
| CVE | CVE-2026-85880 | High | Score 78/100 | First seen |
| CVE | CVE-2026-87491 | High | Score 73/100 | First seen |
IOC Relationship Graph
Building graph…