Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Sudo Flaw Lets Unprivileged Users Bypass Time-Based Restrictions on Privileged Commands
Threat Actors
Malware Families
Excerpt
A newly disclosed high-severity vulnerability in Sudo could allow local unprivileged Linux users to bypass time-based restrictions configured in sudoers policies. Tracked as CVE-2026-96512, the flaw stems from Sudo’s handling of the attacker-controlled TZ environment variable when it evaluates command authorization windows defined with the NOTBEFORE and NOTAFTER tags. Red Hat is tracking the issue as Bug 2539327 and has classified it as high severity and high priority. The…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-96512 | Medium | Score 51/100 | First seen |
| SHA1 | 1820a349687522f51023d1ae5925125f59679a8c | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…