DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Gheist: Stolen GitHub Tokens Used to Inject Secret-Stealing Actions Workflows

Gheist: Stolen GitHub Tokens Used to Inject Secret-Stealing Actions Workflows

1
Comments
10 min read
Brotli CVE-2026-111497: Memory Corruption, Information Disclosure, and RCE via Crafted Compressed Streams

Brotli CVE-2026-111497: Memory Corruption, Information Disclosure, and RCE via Crafted Compressed Streams

1
Comments
8 min read
AI Coding Agent Hijacking via Downloads Folder Instruction Files: Blocked Attempt and Lab Reproductions

AI Coding Agent Hijacking via Downloads Folder Instruction Files: Blocked Attempt and Lab Reproductions

1
Comments
12 min read
BlackX: APT41-Associated UEFI Bootkit Bypassing Secure Boot via Baton Drop

BlackX: APT41-Associated UEFI Bootkit Bypassing Secure Boot via Baton Drop

1
Comments
10 min read
Pleasanter CVE-2026-113438: Login with a Valid ID and No Password in Specific LDAP Configurations

Pleasanter CVE-2026-113438: Login with a Valid ID and No Password in Specific LDAP Configurations

1
Comments
6 min read
PHP CVE-2026-115560: Unpatched RCE Risk from Serialization Handler Switching and Upload Progress

PHP CVE-2026-115560: Unpatched RCE Risk from Serialization Handler Switching and Upload Progress

1
Comments
5 min read
Time4Popcorn CVE-2026-30612: Supply Chain Risk from Abandoned Update Domains to SYSTEM/Root Code Execution

Time4Popcorn CVE-2026-30612: Supply Chain Risk from Abandoned Update Domains to SYSTEM/Root Code Execution

1
Comments
6 min read
HPE ArubaOS: Eight Max-Severity Flaws Patched, Including Pre-Auth RCE and PAPI Authentication Bypass

HPE ArubaOS: Eight Max-Severity Flaws Patched, Including Pre-Auth RCE and PAPI Authentication Bypass

1
Comments
9 min read
Signal RingRTC CVE-2026-113380: Queue Saturation Can Keep Audio and Possibly Video Active After Hang-Up

Signal RingRTC CVE-2026-113380: Queue Saturation Can Keep Audio and Possibly Video Active After Hang-Up

1
Comments
7 min read
ISC BIND: Memory Corruption and Potential RCE via GSS-TSIG Replay, Plus Three Remote DoS Vulnerabilities

ISC BIND: Memory Corruption and Potential RCE via GSS-TSIG Replay, Plus Three Remote DoS Vulnerabilities

1
Comments
8 min read
Cisco Expressway CVE-2026-76466: Pre-Auth Root RCE via Persistent Cookies and Missing Client-Certificate Validation

Cisco Expressway CVE-2026-76466: Pre-Auth Root RCE via Persistent Cookies and Missing Client-Certificate Validation

1
Comments
6 min read
Hackers use artificial intelligence in new system of attacks and extortion

Hackers use artificial intelligence in new system of attacks and extortion

Comments
2 min read
Amazon ClickFix: Deploying NetSupport, Lumma, and More Using finger.exe and .plan Files

Amazon ClickFix: Deploying NetSupport, Lumma, and More Using finger.exe and .plan Files

1
Comments
5 min read
AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

1
Comments
7 min read
Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

1
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.