AttackIQ

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 11, 2026
Last mentionedSep 24, 2026

Timeline

2 articles · newest first

On-prem VeloCloud Orchestrator under attack, only some versions patched

Arista warns the actively exploited CVSS 10.0 VeloCloud Orchestrator flaw CVE-2026-93952 has patches for only some affected release trains.

CSO OnlineSep 24, 13:35 UTC · Sep 24, 2026Exploit / PoCExploitedCVE-2026-939523 · 1 read

Attackers use passkey-themed scams to hijack Microsoft 365 accounts

Microsoft tracks ongoing M365 cloud intrusions since May using passkey-themed helpdesk vishing, AiTM phishing, and device-code abuse.

CSO OnlineSep 11, 09:51 UTC · Sep 11, 2026Threat actorExploited6 · 1 read

Related CVEs

by mentions

CVE-2026-939521%9.5
Unauthenticated Input-Validation Flaw in VeloCloud Orchestrator (On-Prem)
published Sep 22, 2026Arista (VeloCloud; formerly VMware/Broadcom) VeloCloud Orchestrator (VCO), on-premisesKEV

Appears with

Microsoft 365vendor · 1
Microsoft Security Research (tracking)threat actor · 1
Aristaorganization · 1
Microsoft Graphproduct · 1
SharePointproduct · 1
Microsoft 365product · 1
AttackIQvendor · 1
VeloCloudorganization · 1
OneDriveproduct · 1
Microsoftvendor · 1
Microsoft Defender for Endpointproduct · 1
Exchange Onlineproduct · 1
Microsoftorganization · 1
Qualysorganization · 1

Entities are extracted by the model from each article. First seen Sep 11, 2026, last mentioned Sep 24, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.