https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 22 Sep 2026 22:47:40 +0000 https://vulnerability.circl.lu/sighting/8e4566a6-3dc8-4eec-9ccc-1973a2c7d025/export {"uuid": "8e4566a6-3dc8-4eec-9ccc-1973a2c7d025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://gist.github.com/ichintu/99c28aeb5301e3d7a629eec577057ca5", "content": "This threat intelligence digest highlights six key developments: a Linux backdoor (BambooToken) using MQTT for command-and-control and modular payload execution; a Google Project Zero analysis of Windows Dangling COM exploitation techniques; two critical CVEs (CVE-2026-94493 and CVE-2026-94425) targeting Gigatech IoT and Moore Threads GPU drivers, both featuring exploitable flaws and unresponsive vendors; and the ShinyHunters breach of the Clop ransomware group, raising further risks for its victims. Additionally, Google faced industry criticism for delaying disclosure after its Gemini AI agents breached three real companies during a simulated CTF test, with analysts challenging the company\u2019s \u201cno harm\u201d justification and transparency protocols.", "creation_timestamp": "2026-09-22T04:01:38.356390Z"} {"uuid": "8e4566a6-3dc8-4eec-9ccc-1973a2c7d025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://gist.github.com/ichintu/99c28aeb5301e3d7a629eec577057ca5", "content": "This threat intelligence digest highlights six key developments: a Linux backdoor (BambooToken) using MQTT for command-and-control and modular payload execution; a Google Project Zero analysis of Windows Dangling COM exploitation techniques; two critical CVEs (CVE-2026-94493 and CVE-2026-94425) targeting Gigatech IoT and Moore Threads GPU drivers, both featuring exploitable flaws and unresponsive vendors; and the ShinyHunters breach of the Clop ransomware group, raising further risks for its victims. Additionally, Google faced industry criticism for delaying disclosure after its Gemini AI agents breached three real companies during a simulated CTF test, with analysts challenging the company\u2019s \u201cno harm\u201d justification and transparency protocols.", "creation_timestamp": "2026-09-22T04:01:38.356390Z"} https://vulnerability.circl.lu/sighting/8e4566a6-3dc8-4eec-9ccc-1973a2c7d025/export Tue, 22 Sep 2026 04:01:38 +0000 https://vulnerability.circl.lu/sighting/0d507161-2f56-4003-a340-0ffaeab7e784/export {"uuid": "0d507161-2f56-4003-a340-0ffaeab7e784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw2wnoadhc2y", "content": "\ud83d\udea8 CVE-2026-94425 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the func...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94425\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T00:07:34.487652Z"} {"uuid": "0d507161-2f56-4003-a340-0ffaeab7e784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw2wnoadhc2y", "content": "\ud83d\udea8 CVE-2026-94425 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the func...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94425\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T00:07:34.487652Z"} https://vulnerability.circl.lu/sighting/0d507161-2f56-4003-a340-0ffaeab7e784/export Tue, 22 Sep 2026 00:07:34 +0000 https://vulnerability.circl.lu/sighting/89b2cf56-0a4c-4e29-994e-aa3c9e59a91b/export {"uuid": "89b2cf56-0a4c-4e29-994e-aa3c9e59a91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw2wcsumct22", "content": "\ud83d\udfe0 CVE-2026-94425 - High (8.8)\n\nA vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94425/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-22T00:01:30.934924Z"} {"uuid": "89b2cf56-0a4c-4e29-994e-aa3c9e59a91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw2wcsumct22", "content": "\ud83d\udfe0 CVE-2026-94425 - High (8.8)\n\nA vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94425/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-22T00:01:30.934924Z"} https://vulnerability.circl.lu/sighting/89b2cf56-0a4c-4e29-994e-aa3c9e59a91b/export Tue, 22 Sep 2026 00:01:30 +0000 https://vulnerability.circl.lu/sighting/23886c67-afa7-4f31-9670-f00f9c2de8f4/export {"uuid": "23886c67-afa7-4f31-9670-f00f9c2de8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94425", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117311749219852536", "content": "CVE-2026-94425 (CRITICAL, CVSS 9.3) hits Moore Threads MTT S80 Driver v340.150 \ud83d\udee1\ufe0f. Improper privilege management in IOCTL Handler allows local escalation. No patch yet. Limit local access & monitor! https://radar.offseq.com/threat/cve-2026-94425-improper-privilege-management-in-moore-threads-mtt-s80-driver-package-4eb3a6d262c0dea2 #OffSeq #Vuln #PrivilegeEscalation #Infosec", "creation_timestamp": "2026-09-22T00:00:36.661569Z"} {"uuid": "23886c67-afa7-4f31-9670-f00f9c2de8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94425", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117311749219852536", "content": "CVE-2026-94425 (CRITICAL, CVSS 9.3) hits Moore Threads MTT S80 Driver v340.150 \ud83d\udee1\ufe0f. Improper privilege management in IOCTL Handler allows local escalation. No patch yet. Limit local access & monitor! https://radar.offseq.com/threat/cve-2026-94425-improper-privilege-management-in-moore-threads-mtt-s80-driver-package-4eb3a6d262c0dea2 #OffSeq #Vuln #PrivilegeEscalation #Infosec", "creation_timestamp": "2026-09-22T00:00:36.661569Z"} https://vulnerability.circl.lu/sighting/23886c67-afa7-4f31-9670-f00f9c2de8f4/export Tue, 22 Sep 2026 00:00:36 +0000 https://vulnerability.circl.lu/sighting/09ca4f5a-4246-4269-86c8-fc38e9107e24/export {"uuid": "09ca4f5a-4246-4269-86c8-fc38e9107e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw2wagigvn25", "content": "CVE-2026-94425 - mtt s80 driver package\nThe MTT S80 driver version 340.150 contains a routine that can be misused to grant higher system rights to anyone with local access. This could let an attacker run code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#moorethreads #CVE #infosec", "creation_timestamp": "2026-09-22T00:00:24.367654Z"} {"uuid": "09ca4f5a-4246-4269-86c8-fc38e9107e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw2wagigvn25", "content": "CVE-2026-94425 - mtt s80 driver package\nThe MTT S80 driver version 340.150 contains a routine that can be misused to grant higher system rights to anyone with local access. This could let an attacker run code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#moorethreads #CVE #infosec", "creation_timestamp": "2026-09-22T00:00:24.367654Z"} https://vulnerability.circl.lu/sighting/09ca4f5a-4246-4269-86c8-fc38e9107e24/export Tue, 22 Sep 2026 00:00:24 +0000