{"uuid": "fb6cb841-71dc-4b43-9566-af328e7a6844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-5531", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mt2k5yvt3t2n", "content": "~Spiderlabs~\nRAVEN tool enables bulk data exfiltration and resilient persistence via rogue users, API keys, and Watcher schedules on Elasticsearch.\n-\nIOCs: CVE-2015-5531, RAVEN\n-\n#DataExfil #Elasticsearch #ThreatIntel", "creation_timestamp": "2026-08-14T16:08:38.610723Z"}