BRIEFOtherhighP54
Private iOS exploit chain offered for sale
Detected17 September 2026 · 23:12 UTC
A seller is advertising a private iOS exploit chain dated 14 Sep 2026, capable of compromising iPhones at the OS level. If genuine, this is a scarce, high-value capability that could enable zero-click or targeted attacks against executives, journalists and government users, so it warrants tracking.
CategoryOther
Severityhigh
Priority score54
Detected17 September 2026 · 23:12 UTC
Other● 58
Venta de exploit 0-day con cadena completa para Chromium en Android 14-16A seller claims a fresh full-chain Chromium RCE affecting Android 14 through 16, advertised as 0-day class and suitable for drive-by exploitation. If genuine, it endangers any Android user, including government and enterprise mobile fleets common across the region. No date or price is shown, so treat it as unverified but high priority for patching and browser hardening.Other● 44
Se vende exploit 0day de escalada de privilegios en Windows 11A user is selling a claimed Windows 11 local privilege escalation 0day, posted within the last day. If real, it enables post-exploitation elevation on fully patched Windows hosts, raising risk across any Windows estate. Unverified 0day claims on forums are frequently scams or repackaged known bugs, so validate before alerting.Other● 45
AnkaTeam hackea el sitio del club español Villarreal CFThe Turkish hacking group AnkaTeam claims to have compromised Villarreal CF, a Spanish La Liga football club, as part of a defacement and data-theft campaign. Sports organizations hold fan personal data, ticketing and payment information, plus partner credentials that can be abused for fraud and downstream attacks. The public claim raises reputational risk and warrants verification of any leaked data.Other● 35
El Villarreal CF habría sido hackeado por AnkaTeamA TurkHackTeam post claims the Spanish football club Villarreal CF was hacked by the 'AnkaTeam' group, likely a defacement/leak claim. While not critical infrastructure, a named Spanish entity being targeted is worth a quick check for leaked fan/customer data or defacement evidence. Impact and authenticity are unverified, so treat as low-confidence.Other● 58
Divulgación de 0day RCE para Apache OFBizA forum user published what is claimed to be a 0day remote code execution proof-of-concept for Apache OFBiz, an open-source ERP/CRM used by enterprises and public bodies. If legitimate, unpatched and internet-exposed OFBiz instances are at immediate risk of full server compromise. Defenders running OFBiz should isolate exposed instances and hunt for exploitation attempts.Other● 60
Exploit zero-day de RCE para Apache OFBiz a la ventaA zero-day remote code execution exploit targeting Apache OFBiz is being sold on BreachForums. OFBiz underpins ERP and e-commerce operations at many enterprises, so a working RCE enables full server compromise and data theft. Organizations running OFBiz should prioritise patching and network monitoring.