DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
City-Forum: Anonymous Data Enumeration Across Salesforce Aura / LWR and ServiceNow Guest Search
anoymask profile

City-Forum: Anonymous Data Enumeration Across Salesforce Aura / LWR and ServiceNow Guest Search

#security #threatintel
Comments
6 min read
Lazarus "Operation Dream Job": From Windows Zero-Day to EDR Bypass and Backdoor Deployment
anoymask profile

Lazarus "Operation Dream Job": From Windows Zero-Day to EDR Bypass and Backdoor Deployment

#security #threatintel
Comments
6 min read
WindRelay + SpyNote: Phone Remote Control and NFC Relay for Loan and Card Fraud
anoymask profile

WindRelay + SpyNote: Phone Remote Control and NFC Relay for Loan and Card Fraud

#security #threatintel
Comments
6 min read
Plug and Pwn: Getting Windows SYSTEM Privileges from Fake USB and RDP Devices
anoymask profile

Plug and Pwn: Getting Windows SYSTEM Privileges from Fake USB and RDP Devices

#security #threatintel
Comments
5 min read
Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption
anoymask profile

Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

#security #threatintel
Comments
11 min read
Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2
anoymask profile

Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

#security #threatintel
Comments
9 min read
BdThemes API-Driven Supply Chain Compromise: Admin XSS to Web Shell and Hidden Admin
anoymask profile

BdThemes API-Driven Supply Chain Compromise: Admin XSS to Web Shell and Hidden Admin

#security #threatintel
Comments
8 min read
Head Mare Breaches TrueConf: From SYSTEM Privileges to Trojanized Legitimate Client Updates
anoymask profile

Head Mare Breaches TrueConf: From SYSTEM Privileges to Trojanized Legitimate Client Updates

#security #threatintel
Comments
9 min read
RovoBlast: One-Click Hijacking of Enterprise AI Permissions for Data Exfiltration
anoymask profile

RovoBlast: One-Click Hijacking of Enterprise AI Permissions for Data Exfiltration

#security #threatintel
Comments
8 min read
VMware ESX Shell Obfuscation: 21 Techniques Work with BusyBox and Bypass Plaintext Keyword Detection
anoymask profile

VMware ESX Shell Obfuscation: 21 Techniques Work with BusyBox and Bypass Plaintext Keyword Detection

#security #threatintel
Comments
7 min read
Metabase Unauthenticated SQL Injection: From Admin Privilege Heist to Connected DB Data Theft
anoymask profile

Metabase Unauthenticated SQL Injection: From Admin Privilege Heist to Connected DB Data Theft

#security #threatintel
Comments
7 min read
UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion
anoymask profile

UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

#security #threatintel
Comments
5 min read
TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited
anoymask profile

TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited

#security #threatintel
Comments
5 min read
Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE
anoymask profile

Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE

#security #threatintel
Comments
5 min read
TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization
anoymask profile

TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

#security #threatintel
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.