Forensia CTI Core

Summary

Ingested excerpt (first ~500 chars of normalized text).

Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M View CSAF Summary Successful exploitation of these vulnerabilities could allow a local attacker to tamper with or destroy information in the affected product, cause a denial-of-service condition in the affected product, or execute arbitrary code when a specially crafted archive file is decompressed by the 7-Zip component included in MELSOFT Update Manager. The following versions of Mitsubishi Electric MELSOFT Update Man…

https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-01

sha256:cc3159c1360772e89d285dd8b92031e2abdb2f0b73ece28a0752371b30f68d78

What we pulled out

Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).

cve4
md50
url4
ipv40
ipv60
sha10
domain5
sha2560
malware_token0
attack_pattern0
threat_actor_token0

Indicators

Linked with report → mentions → indicator. Values open the indicator workspace.

Type	Value	Link
domain	index.html	Open →
domain	www.cisa.gov	Open →
domain	cisa.gov	Open →
url	https://www.cisa.gov/notification	Open →
url	https://www.cisa.gov/privacy-policy	Open →
domain	www.mitsubishielectric.com	Open →
domain

Malware families

Allowlist token matches only.

None extracted.

Threat actors mentioned

Allowlist mentions — not a formal attribution verdict.

None extracted.

ATT&CK techniques

MITRE IDs referenced in text and present in local technique table.

None linked (import ATT&CK or adjust text).

CONTINUE INVESTIGATION

High-signal pivots without leaving the thread you started in search.

All reports
Browse the report corpus.
Intel graph (first IOC)
Neighborhood from the first linked indicator.

← Back to reports