Forensia CTI Core

Summary

Ingested excerpt (first ~500 chars of normalized text).

TP-Link, Photoshop, OpenVPN, Norton VPN vulnerabilities Cisco Talos’ Vulnerability Discovery & Research team recently disclosed eight vulnerabilities in TP-Link, and one each in Adobe Photoshop, OpenVPN, and Gen Digital's Norton VPN. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability Cisco Talos’ Vulnerability Discovery & Research team recently dis…

https://blog.talosintelligence.com/tp-link-photoshop-openvpn-norton-vpn-vulnerabilities

sha256:66761557a4b541fd070d0fc956e8a2cb486ae55206b94b033115fb97c93de8bc

What we pulled out

Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).

cve8
md50
url0
ipv41
ipv60
sha10
domain3
sha2560
malware_token0
attack_pattern0
threat_actor_token0

Indicators

Linked with report → mentions → indicator. Values open the indicator workspace.

Type	Value	Link
domain	snort.org	Open →
ip	2.11.0.30	Open →
domain	crt.sed	Open →
domain	up.exe	Open →
cve	CVE-2026-30814	Open →
cve	CVE-2026-30815	Open →
cve	CVE-2026-30816

Malware families

Allowlist token matches only.

None extracted.

Threat actors mentioned

Allowlist mentions — not a formal attribution verdict.

None extracted.

ATT&CK techniques

MITRE IDs referenced in text and present in local technique table.

None linked (import ATT&CK or adjust text).

CONTINUE INVESTIGATION

High-signal pivots without leaving the thread you started in search.

All reports
Browse the report corpus.
Intel graph (first IOC)
Neighborhood from the first linked indicator.

← Back to reports