Botnet Hunting for Vulnerabilities in Diagnostic Tools, (Tue, Aug 4th)
Teaser from the source
This morning, I noticed specific sources "hunting" for vulnerabilities in URLs that I haven&#;x26;#;39;t noticed before. All of these URLs appear to be associated with diagnostic tools:
This is the RSS-feed teaser. Read the full article at the original source.
Read at SANS ISC DiaryMore on Diagnostic
Other advisories
- MediumCVE-2026-126838A MongoDB Rust Driver component that holds client-side field level encryption settings includes key management service credential material in its diagnostic …
- HighCVE-2026-112800Heap-based buffer overflow in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
- HighCVE-2026-95976Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic Policy Service allows an authorized attacke…
- HighCVE-2026-95934Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
- MediumCVE-2026-123082Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundle…
- HighCVE-2026-95976Windows Diagnostic Policy Service Elevation of Privilege Vulnerability
- HighCVE-2026-95934Windows Diagnostic Policy Service Elevation of Privilege Vulnerability
- HighCVE-2026-112800Windows Diagnostic Policy Service Elevation of Privilege Vulnerability
Other news entries
- Quest Diagnostics confirms data breach exposed patient recordsNewsBleepingComputer
- Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’NewsSecurityWeek
- Quest Diagnostics breach: patient records accessed via Quanum Lab Services ManagerBreachpwn.watch
- PingCAP / TiDB Cloud breach: stolen service-account credentials, data and source code takenBreachpwn.watch
- CISA tells operators to harden Siemens S7 PLCs. Here’s how to do it without disrupting productionNewsCSO Online
- August updates trigger 0xc0000409 errors on Windows Server 2016NewsBleepingComputer
- Abbott Labs Subsidiary BreachedBreachSANS NewsBites
- Abbott probes two cyber incidents amid extortion claimsNewsBleepingComputer
Source: https://isc.sans.edu/diary/rss/33214
ID