Malware

NailaoLocker

According to Orange Cybwerdefense, NailaoLocker is a ransomware using AES-256-CTR mode, which conveniently logs its encryption activities into a log file.

Indicators of Compromise 5

IP 139[.]28[.]37[.]250 IP 151[.]241[.]99[.]207 IP 151[.]241[.]99[.]233 IP 158[.]62[.]198[.]182 IP 192[.]142[.]10[.]99

Source Articles

Check Point warns of SmartConsole zero-day exploited in attacks

Check Point has disclosed an actively exploited zero-day vulnerability, CVE-2026-16232, in its SmartConsole GUI admin panel. The flaw is an authentication bypass that allows unauthenticated attackers to obtain administrator-level application tokens. Exploitation enables changes to security policies and configurations, requiring exposed Management Server IPs and unrestricted Trusted Clients. CISA has added the vulnerability to its known exploited catalog and mandated federal agencies to patch by July 25, 2026.

bleeping-computer ·5d ago