INTEL_REPORT
Cisco Talos Blog · published 4/16/2026, 6:00:31 PM · TLP amber
Summary
Ingested excerpt (first ~500 chars of normalized text).
The Q1 vulnerability pulse Thor provides an overview of the Q1 2026 vulnerability statistics, highlighting key trends in legacy CVEs and the evolving impact of AI on the threat landscape. Welcome to this week’s edition of the Threat Source newsletter.  The first quarter of 2026 passed faster than a misconfigured firewall rule gets exploited — and the last few weeks have been firmly stamped with the "software supply chain compromise" la…
https://blog.talosintelligence.com/the-q1-vulnerability-pulse
sha256:a87375e4f0bece2657181d08110846827f0191ffb5ce3312d464c74fb47f464f
What we pulled out
Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).
Indicators
Linked with report → mentions → indicator. Values open the indicator workspace.
Malware families
Allowlist token matches only.
Threat actors mentioned
Allowlist mentions — not a formal attribution verdict.
ATT&CK techniques
MITRE IDs referenced in text and present in local technique table.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Browse the report corpus.
Neighborhood from the first linked indicator.
| 95.sbx.tg |
| Open → |
| url | https://talosintelligence.com/talos_file_reputation?s=9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 | Open → |
| url | https://talosintelligence.com/talos_file_reputation?s=96fa6a7714670823c83099ea01d24d6d3ae8fef027f01a4ddac14f123b1c9974 | Open → |
| url | https://talosintelligence.com/talos_file_reputation?s=a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 | Open → |
| md5 | 2915b3f8b703eb744fc54c81f4a9c67f | Open → |
| md5 | aac3165ece2959f39ff98334618d10d9 | Open → |
| md5 | c2efb2dcacba6d3ccc175b6ce1b7ed0a | Open → |
| md5 | 7bdbd180c081fa63ca94f9c22c457376 | Open → |
| sha256 | 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 | Open → |
| sha256 | 96fa6a7714670823c83099ea01d24d6d3ae8fef027f01a4ddac14f123b1c9974 | Open → |
| sha256 | 90b1456cdbe6bc2779ea0b4736ed9a998a71ae37390331b6ba87e389a49d3d59 | Open → |
| sha256 | a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 | Open → |
| domain | w32.38d053135d-95.sbx.tg | Open → |
| md5 | 41444d7018601b599beac0c60ed1bf83 | Open → |
| sha256 | 38d053135ddceaef0abb8296f3b0bf6114b25e10e6fa1bb8050aeecec4ba8f55 | Open → |
| domain | w32.3c1dbc3f56-90.sbx.tg | Open → |
| url | https://talosintelligence.com/talos_file_reputation?s=3c1dbc3f56e91cc79f0014850e773a7f12bbfef06680f08f883b2bf12873eccc | Open → |
| md5 | d749e0f8f2cd4e14178a787571534121 | Open → |
| sha256 | 3c1dbc3f56e91cc79f0014850e773a7f12bbfef06680f08f883b2bf12873eccc | Open → |
| domain | 280575.crdownload.exe | Open → |
| url | https://talosintelligence.com/talos_file_reputation?s=90b1456cdbe6bc2779ea0b4736ed9a998a71ae37390331b6ba87e389a49d3d59   | Open → |
| url | https://talosintelligence.com/talos_file_reputation?s=38d053135ddceaef0abb8296f3b0bf6114b25e10e6fa1bb8050aeecec4ba8f55   | Open → |