PULSE
ES
FEED
vulnKEV agrega CVE-2026-93952 — Arista / VeloCloud OrchestratorvulnKEV agrega CVE-2026-94127 — F5 / BIG-IP APMvulnKEV agrega CVE-2026-93616 — Check Point / Multiple ProductsvulnKEV agrega CVE-2026-85102 — Check Point / Multiple ProductsvulnKEV agrega CVE-2026-7273 — Zyxel / GS1900 Series SwitchesvulnKEV agrega CVE-2025-39964 — Linux / KernelvulnKEV agrega CVE-2026-53266 — Linux / KernelvulnKEV agrega CVE-2025-39682 — Linux / KernelvulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-93952 — Arista / VeloCloud OrchestratorvulnKEV agrega CVE-2026-94127 — F5 / BIG-IP APMvulnKEV agrega CVE-2026-93616 — Check Point / Multiple ProductsvulnKEV agrega CVE-2026-85102 — Check Point / Multiple ProductsvulnKEV agrega CVE-2026-7273 — Zyxel / GS1900 Series SwitchesvulnKEV agrega CVE-2025-39964 — Linux / KernelvulnKEV agrega CVE-2026-53266 — Linux / KernelvulnKEV agrega CVE-2025-39682 — Linux / KernelvulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / Artifactory
Kalir Brief · Item25 September 2026 · 11:19 UTC
BRIEFAccess salehighP68

Enterprise access via Tailscale and RDP for sale

Detected25 September 2026 · 11:19 UTC
Why it matters

A seller is advertising authenticated enterprise access that combines Tailscale VPN and RDP, which points to a live foothold inside a corporate network rather than a mere credential dump. Hybrid VPN-plus-RDP access lets an intruder bypass perimeter controls and pivot laterally with legitimate tooling. Defenders should watch for anomalous Tailscale device enrollment, new remote-access sessions and unusual RDP logins from unexpected geographies.

MetadataRECORD
CategoryAccess sale
Severityhigh
Priority score68
Detected25 September 2026 · 11:19 UTC
Related items6
Access sale● 35
Venta de acceso de administrador a la firma contable trakaccountantsA seller offers admin-level access to the website of Australian accounting firm trakaccountants.com.au. Although a small target, verified admin access to a professional-services firm can support fraud, client data theft and supply-chain pivoting, so it is worth noting at low priority.
13m
Access sale● 60
Venta de acceso a PLC MicroLogix 1400 en TaiwánA vendor is selling live access to a MicroLogix 1400 controller in Taiwan with live analog IO for 12 XMR. Industrial controllers govern physical processes, so buyers could disrupt operations or cause safety incidents; it is a genuine OT access sale.
13m
Access sale● 62
Venta de acceso a PLC CompactLogix en Corea del SurA seller advertises live CompactLogix 5333ER access in South Korea via a Modbus TCP gateway. Access to such controllers enables manipulation of industrial processes and is valuable to attackers targeting critical infrastructure, so it merits tracking.
13m
Access sale● 64
Venta de acceso a PLC 5069-L320ER en Chicago, EE.UU.A vendor is offering live access to an Allen-Bradley 5069-L320ER controller in Chicago with deep process IO. Live control of industrial hardware poses sabotage and safety risks, marking it as a serious OT access sale that defenders should surface.
13m
Access sale● 66
Venta de acceso a PLC MicroLogix 1400 en Dallas, EE.UU.An actor offers live MicroLogix 1400 access in Dallas, Texas, exposing both SNMP and CIP surfaces. Dual-protocol access increases the risk of process manipulation and network pivoting inside an OT environment, making it a notable industrial access sale.
13m
Access sale● 66
Venta de acceso a PLC 5069-L330ER en Arizona, EE.UU.An actor is selling live access to an Allen-Bradley 5069-L330ER controller in Arizona with full diagnostic IO. Live OT access enables manipulation of industrial processes and safety systems, representing a serious critical-infrastructure access offering for defenders monitoring ICS supply chains.
13m