Anoymask - DEV Community

Anoymask

Oct 27

Gheist: Stolen GitHub Tokens Used to Inject Secret-Stealing Actions Workflows

#security #threatintel

1

10 min read

Anoymask

Oct 27

Brotli CVE-2026-111497: Memory Corruption, Information Disclosure, and RCE via Crafted Compressed Streams

#security #threatintel

1

8 min read

Anoymask

Oct 26

AI Coding Agent Hijacking via Downloads Folder Instruction Files: Blocked Attempt and Lab Reproductions

#security #threatintel

1

12 min read

Anoymask

Oct 25

BlackX: APT41-Associated UEFI Bootkit Bypassing Secure Boot via Baton Drop

#security #threatintel

1

10 min read

Anoymask

Oct 24

PHP CVE-2026-115560: Unpatched RCE Risk from Serialization Handler Switching and Upload Progress

#security #threatintel

1

5 min read

Anoymask

Oct 24

Pleasanter CVE-2026-113438: Login with a Valid ID and No Password in Specific LDAP Configurations

#security #threatintel

1

6 min read

Anoymask

Oct 24

Time4Popcorn CVE-2026-30612: Supply Chain Risk from Abandoned Update Domains to SYSTEM/Root Code Execution

#security #threatintel

1

6 min read

Anoymask

Oct 24

HPE ArubaOS: Eight Max-Severity Flaws Patched, Including Pre-Auth RCE and PAPI Authentication Bypass

#security #threatintel

1

9 min read

Anoymask

Oct 23

Signal RingRTC CVE-2026-113380: Queue Saturation Can Keep Audio and Possibly Video Active After Hang-Up

#security #threatintel

1

7 min read

Anoymask

Oct 23

Cisco Expressway CVE-2026-76466: Pre-Auth Root RCE via Persistent Cookies and Missing Client-Certificate Validation

#security #threatintel

1

6 min read

Anoymask

Oct 23

ISC BIND: Memory Corruption and Potential RCE via GSS-TSIG Replay, Plus Three Remote DoS Vulnerabilities

#security #threatintel

1

8 min read

Anoymask

Oct 23

LiteLLM 1.107.0 Supply Chain Compromise: Python Startup Hooks Steal Cloud and AI Credentials

#security #threatintel

3

4

9 min read

Anoymask

Oct 23

GitLab CVE-2026-110264: Pre-Authentication RCE via Integer Overflow in Regular Expression Compiler

#security #threatintel

1

7 min read

Anoymask

Oct 23

Arista VeloCloud On-Prem CVE-2026-114625: Actively Exploited SQL Injection Enables Operator Privilege Escalation

#security #threatintel

1

7 min read

Anoymask

Oct 22

AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

#security #threatintel

1

7 min read

Anoymask

Oct 22

Context Bombs: Misleading Offensive AI Agents into Decoys to Lower Success Rates and Economic Efficiency

#security #threatintel

1

6 min read

Anoymask

Oct 22

PHP2Shell: Two Pre-Authentication RCE Vulnerabilities in PHP Core with Confirmed Active Exploitation Attempts

#security #threatintel

2

11 min read

Anoymask

Oct 22

Operation FlashHole: Initial In-Memory Execution via CrossWeb EX and Post-Quantum Payload Protection

#security #threatintel

1

6 min read

Anoymask

Oct 22

Amazon ClickFix: Deploying NetSupport, Lumma, and More Using finger.exe and .plan Files

#security #threatintel

1

5 min read

Anoymask

Oct 22

Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

#security #threatintel

1

6 min read

Anoymask

Oct 22

Four Agentic AI Attack Campaigns: Delegating Healthcare, Government, and SaaS Breaches to Agents

#security #threatintel

1

6 min read

Anoymask

Oct 22

Legitimate Service Abuse: Over 25 Platforms Repurposed for Fraud and Phishing Delivery

#security #threatintel

1

5 min read

Anoymask

Oct 21

Urgent Patch Alert: PHP2Shell, GitLab RCE, and Node.js Brotli RCE

#security #gitlab #node #php

3

7 min read

Anoymask

Oct 21

Cairn Operations Against Asian Governments and Enterprises: Human and AI Roles Across 66 Project Records

#security #threatintel

2

9 min read

Anoymask

Oct 21

Exposed Cairn Panels: Over 20 Dashboards and 1,100+ Projects in the Largest Observed Cluster

#security #threatintel

2

9 min read

Anoymask

Oct 21

eMudhra: Eight Intermediate CA Private Keys Recoverable Due to Flawed Key Generation

#security #threatintel

2

9 min read

Anoymask

Oct 21

APT28/HOOKEDGE: Credential Capture, Reverse SSH Tunneling, and a Memory Loader at a Naval Shipbuilder

#security #threatintel

2

9 min read

Anoymask

Oct 21

SafePay Ransomware: At Least 600 Victims and Multiple Intrusion Paths to Double Extortion

#security #threatintel

2

8 min read

Anoymask

Oct 21

Zeabur Re-Breach: Unrotated Admin Credentials Expose 3.2 Million Environment Variable Records

#security #threatintel

2

10 min read

Anoymask

Oct 21

OVHcloud CLI Supply Chain Attack: Release Assets Replaced to Steal Developer Secrets

#security #threatintel

2

9 min read

Anoymask

Oct 20

Rank Math PRO 3.0.123 Supply Chain Compromise: Backdoor Can Regenerate on Page Visits

#security #threatintel

1

7 min read

Anoymask

Oct 20

Plex2Shell: Four-Vulnerability Chain Exploited the Day After PoC Release to Deploy Miners and Residential Proxies

#security #threatintel

1

7 min read

Anoymask

Oct 20

OpenCode Console Compromise: Potential Exposure of External AI Provider API Keys and Unauthorized Charge Reports

#security #threatintel

1

7 min read

Anoymask

Oct 20

NGINX CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479: Memory Corruption in Non-Default Configurations

#security #threatintel

1

7 min read

Anoymask

Oct 20

AOMEI Update Infrastructure Compromised: CROSSROAD and SHINYROAD Delivered in 5–10-Minute Tampering Windows

#security #threatintel

1

7 min read

Anoymask

Oct 18

PwnEscape: Guest-to-Host KVM Escape and Host Memory Leak via Linux Checksum Processing (CVE-2026-99999)

#security #threatintel

1

10 min read

Anoymask

Oct 18

Drupal CVE-2026-108097 and CVE-2026-108099: Pre-Authentication RCE Vectors in Field UI and Entity List

#security #threatintel

1

8 min read

Anoymask

Oct 18

ConnectWise Cloud Backup Breach: Stolen App Credentials Used to Compromise Microsoft 365 Tenants

#security #threatintel

1

11 min read

Anoymask

Oct 17

ICS-Sniper: Estimating Critical Time Windows in Encrypted SCADA Traffic for Targeted Packet Dropping

#security #threatintel

1

8 min read

Anoymask

Oct 17

BlockStrap / CVE-2026-103849: Unauthenticated RCE via Two-Stage Directive Processing in Magento and Adobe Commerce

#security #threatintel

2

7 min read

Anoymask

Oct 17

Langflow CVE-2026-105740: RCE via Authenticated MCP Stdio, 2,023 Exploitation Attempts Observed

#security #threatintel

1

7 min read

Anoymask

Oct 17

BeyondTrust CVE-2026-102764: ARMORY CASTLE Exploits Zero-Day to Deploy SAWFLY and BARECLAW

#security #threatintel

1

8 min read

Anoymask

Oct 17

AI-Assisted OT Lab Tests: Equipment Control in Just Over 16 Minutes After Perimeter Compromise; Robotic Arm in a Separate Test

#security #threatintel

1

6 min read

Anoymask

Oct 16

PAN-OS CVE-2026-0322: Authenticated Code Injection in Management Interface Leads to Root Privileges

#security #threatintel

1

5 min read

Anoymask

Oct 16

skynox7: D-Link, Ubiquiti, and SAP Devices Repurposed into Pawns.app Residential Proxies

#security #threatintel

1

6 min read

Anoymask

Oct 16

CikaBika: Rust RAT Uses Discord C2; UAC Bypass and Edge DLL Placement Are Attempted

#security #threatintel

1

7 min read

Anoymask

Oct 16

Collabora Online CVE-2026-110447: Pre-Authentication OS Command Injection in Nextcloud Built-in CODE Server

#security #threatintel

1

6 min read

Anoymask

Oct 16

AdFection: Zero-Click Chain Delivering Candiru Spyware via Targeted Ads Without User Interaction

#security #threatintel

1

6 min read

Anoymask

Oct 16

UAT-6275 and TAG-193: Four Phishing Chains and Custom Reverse Shells Targeting Government Organizations

#security #threatintel

1

8 min read

Anoymask

Oct 16

Arch Linux AUR: Typosquatted yay and paru Packages Execute Remote Scripts with Root Privileges

#security #threatintel

1

5 min read

Anoymask

Oct 15

PEERSTITCH: Theft of 500+ Firewall Configurations and Payload Injection into FortiGate Daemons

#security #threatintel

1

6 min read

Anoymask

Oct 15

Package Manager Integrity Study: Only 2 of 25 Verified All Downloads by Default in Tests

#security #threatintel

1

4 min read

Anoymask

Oct 15

Hirudo: Replaces Banking Apps to Tamper with Local Signature, Accessibility, and Play Integrity Checks

#security #threatintel

1

6 min read

Anoymask

Oct 15

SneakPeek: Claude Code Desktop Preview Can Exfiltrate Local Secrets After Repository Cloning and a File Review Request

#security #threatintel

1

6 min read

Anoymask

Oct 15

Storm-3119/Storm-2990: YAM Store and CoGUI Infrastructure Behind Over One Billion Phishing Emails and SMS Messages

#security #threatintel

2

1

7 min read

Anoymask

Oct 15

Cisco SEG CVE-2026-76519: Active Exploitation of a Vulnerability Allowing Root Command Execution

#security #threatintel

1

7 min read

Anoymask

Oct 14

Ghostscript CVE-2026-39919: Build-Dependent RCE via JPEG 2000 Heap Overflow

#security #threatintel

1

6 min read

Anoymask

Oct 14

Ivanti Connect Secure CVE-2026-104935: Authentication Bypass and Race Condition RCE to Root

#security #threatintel

1

8 min read

Anoymask

Oct 14

SAP Cloud SDK for Python CVE-2026-89111: OAuth2 Client Credentials Exfiltration via tenant_subdomain

#security #threatintel

1

6 min read

Anoymask

Oct 14

AssetView CVE-2026-101020: Privilege Escalation from Low-Privilege Windows User to SYSTEM

#security #threatintel

1

5 min read

4 Week Community Wellness Streak

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Want to connect with Anoymask?