NightmareStresser

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 17, 2026
Last mentionedSep 21, 2026

Timeline

2 articles · newest first

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

Weekly recap led by actively exploited Cisco ISE auth-bypass CVE-2026-76460 (CVSS 10.0), plus Plugin4Shell AI-agent RCE and KREMLIN banking malware.

The Hacker NewsSep 21, 14:24 UTC · Sep 21, 2026Exploit / PoCExploitedCVE-2026-76460 CVE-2026-32882 CVE-2026-58138+2711 · 1 read

FBI Takes Down NightmareStresser DDoS Service Used in Hundreds of Thousands of Attacks

FBI and RCMP seized NightmareStresser booter domains, disrupting a long-running DDoS-for-hire service used in hundreds of thousands of attacks since 2022.

Cyber Security NewsSep 17, 15:48 UTC · Sep 17, 2026Policy & legalExploited1 · 1 read

Related CVEs

by mentions

CVE-2026-58704<1%8.8
Permission Bypass in Google Pixel Cellular Modem Allows Proximal Privilege Escalation
published Sep 15, 2026Google Cellular Modem (modem firmware on Google Pixel-class devices, per assigning CNA)KEV
CVE-2026-684889.9
TOCTOU Symlink Race in Plesk Allows Local Privilege Escalation to Root
published Sep 10, 2026Plesk (server hosting/automation panel)
CVE-2026-78623<1%9.9
SQL Injection in Okta Access Gateway via Unsanitized SAML Assertion Values
published Sep 8, 2026Okta Access Gateway
CVE-2026-917499.6
Critical Use-After-Free in Google Chrome Workers Enables Sandbox Escape
published Sep 15, 2026Google Chrome
CVE-2026-614101%9.4
Missing Authorization Allows Unauthenticated RCE in Dell Secure Connect Gateway 5.0
published Sep 7, 2026Dell Secure Connect Gateway (SCG) 5.0 Appliance
CVE-2026-581389%9.3
Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS…
published Jun 30, 2026PoC
CVE-2026-85982<1%9.0
Stored XSS in Auth0 AD/LDAP Connector Admin Panel
published Sep 8, 2026Okta (Auth0) Auth0 AD/LDAP Connector
CVE-2026-890498.5
SSRF in AWS Systems Manager Agent can expose instance IAM role credentials
published Sep 10, 2026Amazon Web Services (AWS) Systems Manager Agent (SSM Agent)
CVE-2026-68121<1%7.8
Use-After-Free in Linux Kernel PPPoE Send Path Enables Local Root (PPPoEject)
published Aug 10, 2026Linux kernel (PPPoE subsystem, pppoe_sendmsg())PoC ×2
CVE-2026-78626<1%6.5
Authorization Bypass in Okta Access Gateway Protected Rule Checks
published Sep 8, 2026Okta Access Gateway

Appears with

U.S. Department of Justiceorganization · 2
OpenAIorganization · 1
Hacktronorganization · 1
Operation PowerOFForganization · 1
FBIorganization · 1
Europolorganization · 1
Ciscoorganization · 1
Anthropicorganization · 1
AIR Securityorganization · 1
Claude Opus 5ai model · 1
Elasticorganization · 1
Royal Canadian Mounted Policeorganization · 1

Entities are extracted by the model from each article. First seen Sep 17, 2026, last mentioned Sep 21, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.