DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
AmnesiaStealer: macOS Infostealer that Hijacks In-Browser Sessions via ClickFix
anoymask profile

AmnesiaStealer: macOS Infostealer that Hijacks In-Browser Sessions via ClickFix

#security #threatintel
Comments
7 min read
SAP Commerce Cloud CVE-2026-58231: Active Exploit Attempts for Unauthenticated RCE
anoymask profile

SAP Commerce Cloud CVE-2026-58231: Active Exploit Attempts for Unauthenticated RCE

#security #threatintel
Comments
5 min read
Jewelbug: XG-Web Infrastructure Supporting Government Webmail Compromise and Browser Takeover
anoymask profile

Jewelbug: XG-Web Infrastructure Supporting Government Webmail Compromise and Browser Takeover

#security #threatintel
Comments
6 min read
Akira: Intrusion Stopping EDR via Safe Mode and Exfiltrating Data Before Encryption
anoymask profile

Akira: Intrusion Stopping EDR via Safe Mode and Exfiltrating Data Before Encryption

#security #threatintel
Comments
6 min read
JWR: A Real-Time PhaaS Using WebSockets to Monitor Victim Input and Remotely Control Screen Transitions
anoymask profile

JWR: A Real-Time PhaaS Using WebSockets to Monitor Victim Input and Remotely Control Screen Transitions

#security #threatintel
Comments
5 min read
VMware vCenter CVE-2026-59310: Active Exploitation of Unauthenticated RCE for Persistent Reverse SSH
anoymask profile

VMware vCenter CVE-2026-59310: Active Exploitation of Unauthenticated RCE for Persistent Reverse SSH

#security #threatintel
Comments
5 min read
macOS Screen Sharing CVE-2026-65400: Authentication Bypass Leads to Root Access and Monero Miner Installation
anoymask profile

macOS Screen Sharing CVE-2026-65400: Authentication Bypass Leads to Root Access and Monero Miner Installation

#security #threatintel
Comments
5 min read
Plug and Pwn: Getting Windows SYSTEM Privileges from Fake USB and RDP Devices
anoymask profile

Plug and Pwn: Getting Windows SYSTEM Privileges from Fake USB and RDP Devices

#security #threatintel
Comments
5 min read
WindRelay + SpyNote: Phone Remote Control and NFC Relay for Loan and Card Fraud
anoymask profile

WindRelay + SpyNote: Phone Remote Control and NFC Relay for Loan and Card Fraud

#security #threatintel
Comments
6 min read
Lazarus "Operation Dream Job": From Windows Zero-Day to EDR Bypass and Backdoor Deployment
anoymask profile

Lazarus "Operation Dream Job": From Windows Zero-Day to EDR Bypass and Backdoor Deployment

#security #threatintel
Comments
6 min read
City-Forum: Anonymous Data Enumeration Across Salesforce Aura / LWR and ServiceNow Guest Search
anoymask profile

City-Forum: Anonymous Data Enumeration Across Salesforce Aura / LWR and ServiceNow Guest Search

#security #threatintel
Comments
6 min read
Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2
anoymask profile

Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

#security #threatintel
Comments
9 min read
Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption
anoymask profile

Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

#security #threatintel
Comments
11 min read
BdThemes API-Driven Supply Chain Compromise: Admin XSS to Web Shell and Hidden Admin
anoymask profile

BdThemes API-Driven Supply Chain Compromise: Admin XSS to Web Shell and Hidden Admin

#security #threatintel
Comments
8 min read
GeoServer jsonArrayContains SQL Injection: Hundreds of Attempts Observed, RCE Conditions, and the 2023 CVE Gap
anoymask profile

GeoServer jsonArrayContains SQL Injection: Hundreds of Attempts Observed, RCE Conditions, and the 2023 CVE Gap

#security #threatintel
Comments
10 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.