Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware
2026-08-15T20:51:37Z•ca817efed9494bf89a4b3974bc8e0788fffe84a637e9d3305d3dc33231f72ea5
CVE-2026-20349CVE-2026-58231CVE-2026-65400CVE-2026-71362Adobe CommerceCISA KEVCisco Secure FirewallDNS abuseGeoServerMetabaseSAP Commerce CloudWindowsactive exploitationbrowser credential theftcommand and controlcryptominingdata leakdata scrapingexpired domainsinfostealermacOSransomware and malware deliveryspywarevulnerabilityweb application securityzero-day
What happened
Security news covering active exploitation of critical vulnerabilities in SAP Commerce Cloud, macOS Screen Sharing, Adobe Commerce, Cisco Secure Firewall, Windows, and Metabase; probing of an unpatched GeoServer zero-day; macOS infostealer and mercenary spyware activity; expired-domain abuse for malware and C2; and a large Chess.com data exposure attributed to scraping.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- ca817efed9494bf89a4b3974bc8e0788fffe84a637e9d3305d3dc33231f72ea5
- Enrichment time
- 2026-08-15T20:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.