Ido Cohen: A new ransomware-linked vulnerability has recently been added to DarkFeed's CISA KEV monitoring. CVE-2026-35273 affects Oracle PeopleSoft Enterprise PeopleTools and allows unauthenticated attackers to potentially gain control over vulnerable systems. The vulnerability is already listed in CISA's Known Exploited Vulnerabilities catalog and has been associated with ransomware activity. Organizations using PeopleSoft should prioritize patching and exposure assessment.2026-06-20
ido_cohen2ransomwareUnknownT1566
Independent cyber threat research covering malware campaigns, phishing infrastructure and vulnerability exploitation.
apt-c-06 indicators and references2026-06-18
apt-c-06iocUnited States
APTTrail mantiene indicadores publicos asociados a apt-c-06. Aliases observados: apt-c-06, apt06, thinmon. Conteo por tipo: domain: 314, file_path: 7, ipv4: 3, url: 2.
HeaderTip indicators and references2026-06-18
headertipiocUnited Kingdom
APTTrail mantiene indicadores publicos asociados a HeaderTip. Aliases observados: HeaderTip, cosmicbeetle, scarab, spacecolon. Conteo por tipo: domain: 55, ipv4: 1, url: 3.
darknights indicators and references2026-06-18
darknightsiocUnknown
APTTrail mantiene indicadores publicos asociados a darknights. Aliases observados: darknights, dknife, spellbinder, wizardnet. Conteo por tipo: domain: 4, ipv4: 13, url: 10.
StealthMole: RT by @stealthmole_int: Government-Related Darkweb/Deepweb Leak Activity — First Week of June 2026 Observed activity consists of 26 government-related leak or sale postings and 4 ransomware/extortion listings tied to public-sector or government-associated entities. The activity is distributed across multiple underground forums and Tor-hosted leak sites, with visible concentration on darkforums, spear, and craxpro.2026-06-10
stealthmole_intransomwareMexico
StealthMole cyber threat intelligence on ransomware, data leaks and criminal underground ecosystems.