ThreatsDay: Fortinet fixes, PHP2Shell scans, Authenticator token flaw
Fortinet is withholding flaw details until November 10 while Hudson Rock reports 40,573 exposed FortiGate secrets.
64
Organization
Infoblox
- Mentions · 7d3
- Mentions · 30d8
- All mentions11
- First seenSep 2, 2026
- Last mentioned1d ago
Timeline
11 articles · newest firstSchool and government DNS abused to promote illegal gambling
Infoblox found two operations using CNAME aliases and nameserver delegations; it does not report malware or stolen data.
58
Attackers shadow Indian government domains to promote illegal gambling sites
Infoblox says unauthorized NS delegations on maharashtra.gov.in and a separate Hidden Hawk operation abused school and government domains for SEO.
58
Infoblox infiltrates long-running Microsoft tech-support scam
Help TDS, used since 2017, routes victims to fake alerts and remote-access installs.
48
Hackers Abuse 20,000 Cloudflare Pages Domains to Push Fake Microsoft Security Alerts
Attackers used over 20,000 Cloudflare Pages domains to push fake Microsoft alerts into tech-support scams.
74
Researchers Uncover 20,000 Malicious Cloudflare Pages Domains Used in Tech Support Scams
Infoblox found over 20,000 Cloudflare Pages domains used by Help TDS for Microsoft tech-support scams.
62
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Qilin and Settra are exploiting PAN-OS GlobalProtect flaw CVE-2026-0257, alongside new RATs and a DNS wallet drainer.
86
Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
Infoblox ties Help TDS to Hotejka as over 20,000 Cloudflare Pages domains push tech-support scams.
68
Authorities seize popular, long-running DDoS-for-hire service domains
FBI and RCMP seized NightmareStresser DDoS-for-hire domains under Operation PowerOFF; the service enabled hundreds of thousands of attacks since at least 2022.
45
Hackers Are Hiding Espionage Infrastructure Inside Ordinary-Looking Casino Websites
Infoblox links China-aligned APT PeckBirdy C2 infrastructure hidden in casino and adult websites targeting Asian government, finance, IT, and education sectors.
63
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
Attackers BGP-hijacked Softaculous IP space via Hetzner routing lapses to push malicious Virtualizor updates to hosting servers.
65
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-025795%7.8Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway
- CVE-2026-80097<1%8.6Improper Authentication in Microsoft Authenticator Enables Local Privilege Escalation
Appears with
- Cloudflarevendor · 5
- Microsoftvendor · 5
- WordPressproduct · 4
- Cloudflare Pagesproduct · 3
- Ultraviewerproduct · 3
- ROI777threat actor · 3
- Hidden Hawkthreat actor · 3
- Hotejkathreat actor · 3
- Googlevendor · 2
- GoDaddyorganization · 2
- Help TDSthreat actor · 2
- GoDaddyvendor · 2
- Recorded Futureorganization · 1
- PAN-OSproduct · 1
- Guardicore Labsorganization · 1
- DollyWaymalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.