Forensia CTI Core

Summary

Ingested excerpt (first ~500 chars of normalized text).

Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write the FAT and exFAT formats used on USB drives and SD cards. The flaws matter because FatFs is nearly everywhere. It ships inside the firmware that runs security cameras, drones, industrial controllers, hardware crypto wallets, and other devices built on …

https://thehackernews.com/2026/07/unpatched-flaws-disclosed-in-filesystem.html

sha256:142298dadc2a7ecbd55b1b3510b7e5eef826af1064af954c5fb6451a3d5fead8

What we pulled out

Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).

cve9
md50
url0
ipv40
ipv60
sha10
domain1
sha2560
malware_token1
attack_pattern0
threat_actor_token1

Indicators

Linked with report → mentions → indicator. Values open the indicator workspace.

Type	Value	Link
cve	CVE-2026-46817	Open →
cve	CVE-2026-55200	Open →
cve	CVE-2026-6682	Open →
cve	CVE-2026-6687	Open →
cve	CVE-2026-6688	Open →
domain	fno.fname	Open →
cve

Malware families

Allowlist token matches only.

Metasploitmalware-family

Threat actors mentioned

Allowlist mentions — not a formal attribution verdict.

Turla

ATT&CK techniques

MITRE IDs referenced in text and present in local technique table.

None linked (import ATT&CK or adjust text).

CONTINUE INVESTIGATION

High-signal pivots without leaving the thread you started in search.

All reports
Browse the report corpus.
Intel graph (first IOC)
Neighborhood from the first linked indicator.

← Back to reports