Yazoul - Cybersecurity Alerts

@Matchbook3469
13 Followers
3 Following
446 Posts

๐Ÿ” Yazoul Security โ€” CVE Advisories ยท Data Breaches ยท Cyber News

Automated security intelligence: daily CVE alerts, breach reports, correlated news, and learning resources.

๐ŸŒ www.yazoul.net
๐Ÿ“จ Newsletter: www.yazoul.net/
๐Ÿ”— ๐Ÿข @[email protected]

#InfoSec #Cybersecurity #CVE #ThreatIntel #DataBreach

๐Ÿ”ด New security advisory:

CVE-2026-34563 affects multiple systems.

โ€ข Impact: Remote code execution or complete system compromise possible
โ€ข Risk: Attackers can gain full control of affected systems
โ€ข Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-34563-ci4ms-xss-vulnerability

#CVE #ZeroDay #ThreatIntel

CI4MS XSS Vulnerability (CVE-2026-34563) - Patch Now

CVE-2026-34563 is a critical stored XSS flaw in CI4MS CMS skeleton (CVSS 9.1). Attackers can inject malicious JavaScript via backup uploads, compromising admin sessions. Update to version 0.31.0.0 immediately.

Yazoul Security

๐Ÿง  QuasarRAT Daily Report

โžก๏ธ Trend: stable (9%)
๐Ÿ“Š 12 new samples
๐ŸŒ 0 C2 servers

Full analysis, IOCs, and hashes:
https://www.yazoul.net/malware/quasar-rat/reports/2026-04-02

#Infosec #MalwareTracker #ThreatIntel

QuasarRAT Report - 12 New Samples (Apr 2026) | Yazoul Malware Tracker

12 new QuasarRAT samples detected. Trend: stable (9%). Includes IOCs, hashes, C2 servers, and detection rates from MalwareBazaar.

Yazoul Security

โ›” New security advisory:

CVE-2026-34559 affects multiple systems.

โ€ข Impact: Remote code execution or complete system compromise possible
โ€ข Risk: Attackers can gain full control of affected systems
โ€ข Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-34559-ci4ms-critical-xss-vulnerability

#InfoSec #VulnerabilityManagement #CyberSec

CI4MS Critical XSS Vulnerability (CVE-2026-34559) - Patch Now

CVE-2026-34559 is a critical stored XSS flaw in CI4MS CMS (CVSS 9.1). Attackers can inject malicious scripts via blog tags, compromising user sessions and admin panels. Update to version 0.31.0.0 immediately.

Yazoul Security

๐Ÿง  Formbook Daily Report

โฌ‡๏ธ Trend: declining (24%)
๐Ÿ“Š 14 new samples
๐ŸŒ 55 C2 servers

Full analysis, IOCs, and hashes:
https://www.yazoul.net/malware/formbook/reports/2026-04-03

#CyberThreat #Malware #BlueTeam

Formbook Report - 14 New Samples (Apr 2026) | Yazoul Malware Tracker

14 new Formbook samples detected. Trend: declining (24%). Includes IOCs, hashes, C2 servers, and detection rates from MalwareBazaar.

Yazoul Security

๐Ÿšจ New security advisory:

CVE-2026-34758 affects multiple systems.

โ€ข Impact: Remote code execution or complete system compromise possible
โ€ข Risk: Attackers can gain full control of affected systems
โ€ข Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-34758-oneuptime-auth-bypass

#Cybersecurity #PatchNow #InfoSecCommunity

OneUptime Auth Bypass (CVE-2026-34758) - Patch Now

CVE-2026-34758 is a critical authentication bypass in OneUptime (CVSS 9.1). Unauthenticated attackers can abuse SMS, calls, email, and purchase phone numbers. Update to version 10.0.42 immediately.

Yazoul Security

๐Ÿ”ด New security advisory:

CVE-2026-26135 affects multiple systems.

โ€ข Impact: Remote code execution or complete system compromise possible
โ€ข Risk: Attackers can gain full control of affected systems
โ€ข Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-26135-azure-custom-locations-ssrf

#CVE #ZeroDay #ThreatIntel

Azure Custom Locations SSRF (CVE-2026-26135) - Patch Now

CVE-2026-26135 is a critical SSRF in Azure Custom Locations RP (CVSS 9.6). Authorized attackers can forge requests to escalate privileges over the network. Immediate remediation is required.

Yazoul Security

๐Ÿง  Formbook Daily Report

โžก๏ธ Trend: stable (0%)
๐Ÿ“Š 17 new samples
๐ŸŒ 55 C2 servers

Full analysis, IOCs, and hashes:
https://www.yazoul.net/malware/formbook/reports/2026-04-01

#ThreatHunting #MalwareResearch #InfoSec

Formbook Report - 17 New Samples (Apr 2026) | Yazoul Malware Tracker

17 new Formbook samples detected. Trend: stable (0%). Includes IOCs, hashes, C2 servers, and detection rates from MalwareBazaar.

Yazoul Security

โ›” New security advisory:

CVE-2026-32213 affects multiple systems.

โ€ข Impact: Remote code execution or complete system compromise possible
โ€ข Risk: Attackers can gain full control of affected systems
โ€ข Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-32213-azure-ai-foundry-privilege-escalation

#InfoSec #VulnerabilityManagement #CyberSec

Azure AI Foundry Privilege Escalation (CVE-2026-32213) - Patch Now

CVE-2026-32213 is a critical flaw in Azure AI Foundry (CVSS 10.0). Improper authorization allows network-based attackers to elevate privileges without credentials. Immediate remediation is required.

Yazoul Security

๐Ÿง  Vidar Daily Report

โฌ‡๏ธ Trend: declining (39%)
๐Ÿ“Š 19 new samples
๐ŸŒ 100 C2 servers

Full analysis, IOCs, and hashes:
https://www.yazoul.net/malware/vidar/reports/2026-04-03

#CyberSecurity #MalwareAnalysis #SOC

Vidar Report - 19 New Samples (Apr 2026) | Yazoul Malware Tracker

19 new Vidar samples detected. Trend: declining (39%). Includes IOCs, hashes, C2 servers, and detection rates from MalwareBazaar.

Yazoul Security

๐Ÿง  Agent Tesla Daily Report

โžก๏ธ Trend: stable (5%)
๐Ÿ“Š 21 new samples
๐ŸŒ 0 C2 servers

Full analysis, IOCs, and hashes:
https://www.yazoul.net/malware/agent-tesla/reports/2026-04-03

#Malware #ThreatIntel #Infosec

Agent Tesla Report - 21 New Samples (Apr 2026) | Yazoul Malware Tracker

21 new Agent Tesla samples detected. Trend: stable (5%). Includes IOCs, hashes, C2 servers, and detection rates from MalwareBazaar.

Yazoul Security