{"uuid": "7bde9647-4524-43c9-a220-3b0b52f18e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0001", "type": "seen", "source": "https://gist.github.com/sharan-artemis/f7a5f87dee72f620ace01c845eeb7b83", "content": "\n\n  \n    Artemis E2E Test Intel Feed\n    https://example.invalid/e2e\n    Synthetic threat-intel feed for rss_poll ECS e2e\n    \n      Active exploitation of CVE-2026-0001 remote code execution in Apache HTTP Server\n      https://example.invalid/e2e/cve-2026-0001\n      artemis-e2e-0001\n      Threat actors are actively exploiting CVE-2026-0001, a critical unauthenticated RCE in Apache HTTP Server 2.4.x. Indicators include callbacks to 203.0.113.10 and the dropper hash a1b2c3d4e5f6. Patch immediately.\n      Wed, 16 Sep 2026 15:38:31 +0000\n    \n    \n      Ransomware group Volt-Echo targets healthcare with stolen VPN credentials\n      https://example.invalid/e2e/volt-echo\n      artemis-e2e-0002\n      A ransomware operation dubbed Volt-Echo is using stolen VPN credentials to breach healthcare networks, deploying Cobalt Strike beacons to 198.51.100.7 before encryption. TTPs: T1078 valid accounts, T1486 data encrypted for impact.\n      Wed, 16 Sep 2026 15:38:31 +0000\n    \n  \n\n", "creation_timestamp": "2026-09-16T15:39:46.359454Z"}