Skip to content
Bulwark Black Bulwark Black LLC
Latest
QScan and QTRouter Show Why Proxy Infrastructure Is an Espionage Force MultipliervCenter Exploitation Shows Patching Alone Is Not Incident ResponseEdge Infrastructure Convergence Shows Why Perimeter Devices Need Their Own Patch SLAsSigned ClickOnce Lures Show Why Hiring Workflows Need Endpoint GuardrailsShieldBreak Shows Why Endpoint Protection Needs Compensating ControlsAI-Enabled Malware Still Behaves Like MalwarePrivate APNs Are Becoming OT Attack PathsvCenter Exploitation Shows Why Control Planes Need ContainmentApollo Breach Shows Why Helpdesk Vishing Is a Cloud-Control ProblemBTR.sys Shows Why Trusted Security Drivers Need Behavioral MonitoringWeedHack Shows SEO Poisoning Is Malware Delivery InfrastructureAI Agent Incidents Need Task-Scoped Incident ResponseSDLC Supply-Chain Attacks Show Why Developer Tools Need Runtime ControlsRussian Auth-Flow Phishing Shows MFA Can Be Bypassed Without Exploits

Indicator of Compromise

CVE-2026-18556

CVE Seen in 2 reports Watch this →

A CVE identifier for a specific software vulnerability referenced in this reporting.

Seen in these reports

Cyber Security Blog · Aug 2, 2026

N-able N-central Exploitation Shows Why MSP Tools Are Control-Plane Risk
Cyber Security Blog · Jun 1, 2026

FortiClient EMS Exploitation Turns Endpoint Management Into an Infostealer Delivery System

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

0da123adf9251957a4b850a3f6bd6a753dd4892be176a84a18450e899534cc5e173[.]249[.]252[.]20017e771c78430cc67e71d4547f8996a1a488e9d3f185[.]220[.]101[.]15192[.]42[.]116[.]142927bc31b4f8254c6b332fc03110a6373cad00ffa2ff9de427c26bb222017bb22f25ea1b622abf3212141af932c2ec4cbd6b2b5903c2a531121f691227d98cff338662fd0c4d750a0ba203a32b59f08137[.]19[.]210[.]3268[.]235[.]46[.]21483[.]138[.]53[.]11087[.]249[.]138[.]348c5b72906e8183037532afc3f4639931 CVE-2026-0257 CVE-2026-18577CVE-2026-28299CVE-2026-28323 CVE-2026-35616 CVE-2026-50656 d91c00fad521e76efa89715cca89db487d5676f2c767c883482f9c8f82bd383afd65051c61a904a304919c04a8c8633c001183ac73ac461cd4d9057946f02bf5hxxp://83[.]138[.]53[.]110/dl/p[.]exehxxp://83[.]138[.]53[.]110/service/save[.]phphxxps://www[.]cve[.]org/CVERecord?id=CVE-2026-18556 www[.]cve[.]org
Browse all indicators → Machine-readable feeds → Extract IOCs from text →

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.