Product
high
advisory
ClickFix Campaign Activity
16 IOCsTracking brief for the ClickFix campaign; individual sightings are folded in as reported.
PoC
open source packages +36
campaign
clickfix
16i
updated
high
advisory
Mozilla Security Updates — July 2026
Roundup of Mozilla security advisories published in July 2026.
Mozilla Firefox +10
roundup
high
advisory
Google Security Updates — July 2026
5 CVEs 41 IOCsRoundup of Google security advisories published in July 2026.
golang.org/x/crypto/ssh +74
roundup
5c
41i
updated
high
advisory
Microsoft Security Updates — July 2026
11 CVEs 354 IOCsRoundup of Microsoft security advisories published in July 2026.
PoC
PowerShell +511
roundup
11c
354i
updated
medium
advisory
Suspicious Child Processes from Communication Applications
3 rules 3 TTPsThe detection rule identifies suspicious child processes spawned from communication applications on Windows systems, potentially indicating masquerading or exploitation of vulnerabilities within these applications.
Elastic Defend +12
defense-evasion
persistence
windows
3r
3t
low
advisory
DNS-over-HTTPS Enabled via Registry Modification
3 rules 2 TTPsDetection of DNS-over-HTTPS (DoH) being enabled via registry modifications on Windows systems, potentially indicating defense evasion by masking network activity and hindering traditional DNS monitoring.
Microsoft Edge +2
defense-evasion
windows
dns-over-https
3r
2t