August 2026 - secops-reports

Wazuh notification - wsrv01 - Alert level 12
by Wazuh 31 Aug '26

31 Aug '26

Wazuh Notification. 2026 Aug 31 09:15:48 Received From: wsrv01->3.78.57.226 Rule: 65708 fired (level 12) -> "Cylance: Multiple malware events have been detected on cb-403" Portion of the log(s): 1 2026-08-31T07:15:50.567000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_waived, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:2c80:6050:1a0b:d01a), File Name: vet, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 3D6DE5B761057C4840FCEA4390EB7CE9820E5F346A36167326EC4D249676824C, MD5: F56C1D80BD8B1644A112EE09F94B1BC5, Status: Whitelisted, Cylance Score: 30, Found Date: 8/31/2026 7:11:26 AM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode CylancePROTECT.Event.Type: Threat CylancePROTECT.Event.Name: threat_waived CylancePROTECT.Device.Name: cb-403 CylancePROTECT.IP.Address: 192.168.1.151 CylancePROTECT.Device.ID: 1f2616b8-37aa-4580-90dc-d50ad8a592fd CylancePROTECT.Policy.Name: Core-IT - Protection mode CylancePROTECT.File.Name: vet CylancePROTECT.File.Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/ CylancePROTECT.Drive.Type: Internal Hard Drive CylancePROTECT.SHA265: 3D6DE5B761057C4840FCEA4390EB7CE9820E5F346A36167326EC4D249676824C CylancePROTECT.MD5: F56C1D80BD8B1644A112EE09F94B1BC5 CylancePROTECT.Status: Whitelisted CylancePROTECT.Cylance.Score: 30 CylancePROTECT.Found.Date: 8/31/2026 7:11:26 AM CylancePROTECT.File.Type: MacOSExe CylancePROTECT.Is.Running: False CylancePROTECT.Auto.Run: False CylancePROTECT.Detected.By: BackgroundThreatDetection CylancePROTECT.Is.Malware: False CylancePROTECT.Is.Unique.To.Cylance: False CylancePROTECT.Threat.Classification: PUP 1 2026-08-31T07:15:50.522000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_waived, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:2c80:6050:1a0b:d01a), File Name: asm, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 33A92A0F1DFDDCACF98521ACDAC14B7E0F521BE97EEF42FA8189C637D282799E, MD5: 464D5184C16B0E9F96E4AA39B775D041, Status: Whitelisted, Cylance Score: 100, Found Date: 8/31/2026 7:11:26 AM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-31T07:15:50.479000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_waived, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:2c80:6050:1a0b:d01a), File Name: cgo, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 1F5D30BD0DE94C86247DCACD8BED62135729C5D93A5E61F5C7BCADF25048BB1F, MD5: 36717F3C72E8D9C2AF438C32A0578D05, Status: Whitelisted, Cylance Score: 30, Found Date: 8/31/2026 7:11:26 AM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-31T07:15:50.411000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_waived, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:2c80:6050:1a0b:d01a), File Name: gofmt, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/bin/, Drive Type: Internal Hard Drive, SHA256: 0BCFA961E5C2A8EF2CAC1E8A03E3267D615196EE59248EAB3AB152495A397185, MD5: DEA724F793EC272716008437E74A701E, Status: Whitelisted, Cylance Score: 30, Found Date: 8/31/2026 7:11:26 AM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-31T07:15:50.364000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_waived, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:2c80:6050:1a0b:d01a), File Name: preprofile, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 0AA325933481A69708C94CF09EDBE0D26948C6E329562CFEB64E922177B3C54E, MD5: 44269D17570DD9F4C80C4799E7C8BA2F, Status: Whitelisted, Cylance Score: 30, Found Date: 8/31/2026 7:11:26 AM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode --END OF NOTIFICATION

1 0

Wazuh notification - wsrv01 - Alert level 12
by Wazuh 31 Aug '26

31 Aug '26

Wazuh Notification. 2026 Aug 31 09:11:32 Received From: wsrv01->3.66.37.34 Rule: 65708 fired (level 12) -> "Cylance: Multiple malware events have been detected on cb-403" Portion of the log(s): 1 2026-08-31T07:11:33.498000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_cleared, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: fix, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: B95ACBDF04297DE0EB2E49593055645C23A84ECB18854BEF3247331769563608, MD5: ABD382200F423EB55F51D22E1042ED8A, Status: FileRemoved, Cylance Score: 60, Found Date: 8/30/2026 12:30:53 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode CylancePROTECT.Event.Type: Threat CylancePROTECT.Event.Name: threat_cleared CylancePROTECT.Device.Name: cb-403 CylancePROTECT.IP.Address: 192.168.1.151 CylancePROTECT.Device.ID: 1f2616b8-37aa-4580-90dc-d50ad8a592fd CylancePROTECT.Policy.Name: Core-IT - Protection mode CylancePROTECT.File.Name: fix CylancePROTECT.File.Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/ CylancePROTECT.Drive.Type: Internal Hard Drive CylancePROTECT.SHA265: B95ACBDF04297DE0EB2E49593055645C23A84ECB18854BEF3247331769563608 CylancePROTECT.MD5: ABD382200F423EB55F51D22E1042ED8A CylancePROTECT.Status: FileRemoved CylancePROTECT.Cylance.Score: 60 CylancePROTECT.Found.Date: 8/30/2026 12:30:53 PM CylancePROTECT.File.Type: MacOSExe CylancePROTECT.Is.Running: False CylancePROTECT.Auto.Run: False CylancePROTECT.Detected.By: BackgroundThreatDetection CylancePROTECT.Is.Malware: False CylancePROTECT.Is.Unique.To.Cylance: False CylancePROTECT.Threat.Classification: PUP 1 2026-08-31T07:11:33.323000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_cleared, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: asm, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 33A92A0F1DFDDCACF98521ACDAC14B7E0F521BE97EEF42FA8189C637D282799E, MD5: 464D5184C16B0E9F96E4AA39B775D041, Status: FileRemoved, Cylance Score: 100, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-31T07:11:33.280000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_cleared, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: cgo, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 1F5D30BD0DE94C86247DCACD8BED62135729C5D93A5E61F5C7BCADF25048BB1F, MD5: 36717F3C72E8D9C2AF438C32A0578D05, Status: FileRemoved, Cylance Score: 30, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-31T07:11:33.237000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_cleared, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: gofmt, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/bin/, Drive Type: Internal Hard Drive, SHA256: 0BCFA961E5C2A8EF2CAC1E8A03E3267D615196EE59248EAB3AB152495A397185, MD5: DEA724F793EC272716008437E74A701E, Status: FileRemoved, Cylance Score: 30, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-31T07:11:33.188000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_cleared, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: preprofile, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 0AA325933481A69708C94CF09EDBE0D26948C6E329562CFEB64E922177B3C54E, MD5: 44269D17570DD9F4C80C4799E7C8BA2F, Status: FileRemoved, Cylance Score: 30, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode --END OF NOTIFICATION

1 0

CVE report (13 highlighted)
by airflow＠vital-it.ch 31 Aug '26

31 Aug '26

1 0

Wazuh notification - wsrv01 - Alert level 12
by Wazuh 30 Aug '26

30 Aug '26

Wazuh Notification. 2026 Aug 30 19:12:24 Received From: wsrv01->3.66.37.34 Rule: 65708 fired (level 12) -> "Cylance: Multiple malware events have been detected on cb-403" Portion of the log(s): 1 2026-08-30T17:12:25.921000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_changed, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: vet, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 3D6DE5B761057C4840FCEA4390EB7CE9820E5F346A36167326EC4D249676824C, MD5: F56C1D80BD8B1644A112EE09F94B1BC5, Status: Quarantined, Cylance Score: 30, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode CylancePROTECT.Event.Type: Threat CylancePROTECT.Event.Name: threat_changed CylancePROTECT.Device.Name: cb-403 CylancePROTECT.IP.Address: 192.168.1.151 CylancePROTECT.Device.ID: 1f2616b8-37aa-4580-90dc-d50ad8a592fd CylancePROTECT.Policy.Name: Core-IT - Protection mode CylancePROTECT.File.Name: vet CylancePROTECT.File.Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/ CylancePROTECT.Drive.Type: Internal Hard Drive CylancePROTECT.SHA265: 3D6DE5B761057C4840FCEA4390EB7CE9820E5F346A36167326EC4D249676824C CylancePROTECT.MD5: F56C1D80BD8B1644A112EE09F94B1BC5 CylancePROTECT.Status: Quarantined CylancePROTECT.Cylance.Score: 30 CylancePROTECT.Found.Date: 8/30/2026 12:23:44 PM CylancePROTECT.File.Type: MacOSExe CylancePROTECT.Is.Running: False CylancePROTECT.Auto.Run: False CylancePROTECT.Detected.By: BackgroundThreatDetection CylancePROTECT.Is.Malware: False CylancePROTECT.Is.Unique.To.Cylance: False CylancePROTECT.Threat.Classification: PUP 1 2026-08-30T17:12:25.921000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_changed, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: asm, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 33A92A0F1DFDDCACF98521ACDAC14B7E0F521BE97EEF42FA8189C637D282799E, MD5: 464D5184C16B0E9F96E4AA39B775D041, Status: Quarantined, Cylance Score: 100, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-30T17:12:25.921000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_changed, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: cgo, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 1F5D30BD0DE94C86247DCACD8BED62135729C5D93A5E61F5C7BCADF25048BB1F, MD5: 36717F3C72E8D9C2AF438C32A0578D05, Status: Quarantined, Cylance Score: 30, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-30T17:12:25.921000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_changed, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: gofmt, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/bin/, Drive Type: Internal Hard Drive, SHA256: 0BCFA961E5C2A8EF2CAC1E8A03E3267D615196EE59248EAB3AB152495A397185, MD5: DEA724F793EC272716008437E74A701E, Status: Quarantined, Cylance Score: 30, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-30T17:12:25.921000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_changed, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: preprofile, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 0AA325933481A69708C94CF09EDBE0D26948C6E329562CFEB64E922177B3C54E, MD5: 44269D17570DD9F4C80C4799E7C8BA2F, Status: Quarantined, Cylance Score: 30, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode --END OF NOTIFICATION

1 0

Wazuh notification - wsrv01 - Alert level 12
by Wazuh 30 Aug '26

30 Aug '26

Wazuh Notification. 2026 Aug 30 14:30:58 Received From: wsrv01->3.127.141.35 Rule: 65708 fired (level 12) -> "Cylance: Multiple malware events have been detected on cb-403" Portion of the log(s): 1 2026-08-30T12:30:59.113000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_changed, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: cgo, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 1F5D30BD0DE94C86247DCACD8BED62135729C5D93A5E61F5C7BCADF25048BB1F, MD5: 36717F3C72E8D9C2AF438C32A0578D05, Status: Quarantined, Cylance Score: 30, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode CylancePROTECT.Event.Type: Threat CylancePROTECT.Event.Name: threat_changed CylancePROTECT.Device.Name: cb-403 CylancePROTECT.IP.Address: 192.168.1.151 CylancePROTECT.Device.ID: 1f2616b8-37aa-4580-90dc-d50ad8a592fd CylancePROTECT.Policy.Name: Core-IT - Protection mode CylancePROTECT.File.Name: cgo CylancePROTECT.File.Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/ CylancePROTECT.Drive.Type: Internal Hard Drive CylancePROTECT.SHA265: 1F5D30BD0DE94C86247DCACD8BED62135729C5D93A5E61F5C7BCADF25048BB1F CylancePROTECT.MD5: 36717F3C72E8D9C2AF438C32A0578D05 CylancePROTECT.Status: Quarantined CylancePROTECT.Cylance.Score: 30 CylancePROTECT.Found.Date: 8/30/2026 12:23:44 PM CylancePROTECT.File.Type: MacOSExe CylancePROTECT.Is.Running: False CylancePROTECT.Auto.Run: False CylancePROTECT.Detected.By: BackgroundThreatDetection CylancePROTECT.Is.Malware: False CylancePROTECT.Is.Unique.To.Cylance: False CylancePROTECT.Threat.Classification: PUP 1 2026-08-30T12:30:59.072000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_changed, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: gofmt, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/bin/, Drive Type: Internal Hard Drive, SHA256: 0BCFA961E5C2A8EF2CAC1E8A03E3267D615196EE59248EAB3AB152495A397185, MD5: DEA724F793EC272716008437E74A701E, Status: Quarantined, Cylance Score: 30, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-30T12:30:59.029000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_changed, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: preprofile, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 0AA325933481A69708C94CF09EDBE0D26948C6E329562CFEB64E922177B3C54E, MD5: 44269D17570DD9F4C80C4799E7C8BA2F, Status: Quarantined, Cylance Score: 30, Found Date: 8/30/2026 12:23:44 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: PUP - Generic, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-30T12:30:58.981000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_found, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: fix, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: B95ACBDF04297DE0EB2E49593055645C23A84ECB18854BEF3247331769563608, MD5: ABD382200F423EB55F51D22E1042ED8A, Status: Suspicious, Cylance Score: 60, Found Date: 8/30/2026 12:30:53 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: UNCLASSIFIED, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-30T12:30:58.934000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_found, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: cover, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 85025682799725E724FED3849DAD2B846FC098514E27A2FDEBFFAE5FFD1998F4, MD5: 9B4B0C9B20A81DA4F839F44C375AA782, Status: Suspicious, Cylance Score: 30, Found Date: 8/30/2026 12:30:53 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: UNCLASSIFIED, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode --END OF NOTIFICATION

1 0

Wazuh notification - wsrv01 - Alert level 12
by Wazuh 30 Aug '26

30 Aug '26

Wazuh Notification. 2026 Aug 30 14:23:48 Received From: wsrv01->3.78.57.226 Rule: 65708 fired (level 12) -> "Cylance: Multiple malware events have been detected on cb-403" Portion of the log(s): 1 2026-08-30T12:23:49.761000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_found, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: vet, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 3D6DE5B761057C4840FCEA4390EB7CE9820E5F346A36167326EC4D249676824C, MD5: F56C1D80BD8B1644A112EE09F94B1BC5, Status: Suspicious, Cylance Score: 30, Found Date: 8/30/2026 12:23:43 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: UNCLASSIFIED, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode CylancePROTECT.Event.Type: Threat CylancePROTECT.Event.Name: threat_found CylancePROTECT.Device.Name: cb-403 CylancePROTECT.IP.Address: 192.168.1.151 CylancePROTECT.Device.ID: 1f2616b8-37aa-4580-90dc-d50ad8a592fd CylancePROTECT.Policy.Name: Core-IT - Protection mode CylancePROTECT.File.Name: vet CylancePROTECT.File.Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/ CylancePROTECT.Drive.Type: Internal Hard Drive CylancePROTECT.SHA265: 3D6DE5B761057C4840FCEA4390EB7CE9820E5F346A36167326EC4D249676824C CylancePROTECT.MD5: F56C1D80BD8B1644A112EE09F94B1BC5 CylancePROTECT.Status: Suspicious CylancePROTECT.Cylance.Score: 30 CylancePROTECT.Found.Date: 8/30/2026 12:23:43 PM CylancePROTECT.File.Type: MacOSExe CylancePROTECT.Is.Running: False CylancePROTECT.Auto.Run: False CylancePROTECT.Detected.By: BackgroundThreatDetection CylancePROTECT.Is.Malware: False CylancePROTECT.Is.Unique.To.Cylance: False CylancePROTECT.Threat.Classification: UNCLASSIFIED 1 2026-08-30T12:23:49.717000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_found, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: asm, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 33A92A0F1DFDDCACF98521ACDAC14B7E0F521BE97EEF42FA8189C637D282799E, MD5: 464D5184C16B0E9F96E4AA39B775D041, Status: Default, Cylance Score: 100, Found Date: 8/30/2026 12:23:43 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: UNCLASSIFIED, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-30T12:23:49.654000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_found, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: cgo, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 1F5D30BD0DE94C86247DCACD8BED62135729C5D93A5E61F5C7BCADF25048BB1F, MD5: 36717F3C72E8D9C2AF438C32A0578D05, Status: Suspicious, Cylance Score: 30, Found Date: 8/30/2026 12:23:43 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: UNCLASSIFIED, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-30T12:23:49.589000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_found, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: gofmt, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/bin/, Drive Type: Internal Hard Drive, SHA256: 0BCFA961E5C2A8EF2CAC1E8A03E3267D615196EE59248EAB3AB152495A397185, MD5: DEA724F793EC272716008437E74A701E, Status: Suspicious, Cylance Score: 30, Found Date: 8/30/2026 12:23:43 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: UNCLASSIFIED, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode 1 2026-08-30T12:23:49.539000+00:00 sysloghost CylancePROTECT - - - Event Type: Threat, Event Name: threat_found, Device Name: cb-403, IP Address: (192.168.1.151, 2001:1711:fa52:e6f0:1838:bb40:52a2:d24b, 2001:1711:fa52:e6f0:e15e:2987:d25:87c3), File Name: preprofile, Path: /opt/homebrew/Cellar/go/1.27.0/libexec/pkg/tool/darwin_arm64/, Drive Type: Internal Hard Drive, SHA256: 0AA325933481A69708C94CF09EDBE0D26948C6E329562CFEB64E922177B3C54E, MD5: 44269D17570DD9F4C80C4799E7C8BA2F, Status: Suspicious, Cylance Score: 30, Found Date: 8/30/2026 12:23:43 PM, File Type: MacOSExe, Is Running: False, Auto Run: False, Detected By: BackgroundThreatDetection, Zone Names: (Core-IT Mac), Is Malware: False, Is Unique To Cylance: False, Threat Classification: UNCLASSIFIED, Device Id: 1f2616b8-37aa-4580-90dc-d50ad8a592fd, Policy Name: Core-IT - Protection mode --END OF NOTIFICATION

1 0

CVE report (28 highlighted)
by airflow＠vital-it.ch 28 Aug '26

28 Aug '26

1 0

CVE report (12 highlighted)
by airflow＠vital-it.ch 27 Aug '26

27 Aug '26

1 0

CVE report (16 highlighted)
by airflow＠vital-it.ch 26 Aug '26

26 Aug '26

1 0

CVE report (8 highlighted)
by airflow＠vital-it.ch 25 Aug '26

25 Aug '26

1 0