Anoymask - DEV Community

Anoymask

Aug 14

JWR: A Real-Time PhaaS Using WebSockets to Monitor Victim Input and Remotely Control Screen Transitions

#security #threatintel

5 min read

Anoymask

Aug 14

VMware vCenter CVE-2026-59310: Active Exploitation of Unauthenticated RCE for Persistent Reverse SSH

#security #threatintel

5 min read

Anoymask

Aug 14

Jewelbug: XG-Web Infrastructure Supporting Government Webmail Compromise and Browser Takeover

#security #threatintel

6 min read

Anoymask

Aug 14

Akira: Intrusion Stopping EDR via Safe Mode and Exfiltrating Data Before Encryption

#security #threatintel

6 min read

Anoymask

Aug 13

Plug and Pwn: Getting Windows SYSTEM Privileges from Fake USB and RDP Devices

#security #threatintel

5 min read

Anoymask

Aug 13

City-Forum: Anonymous Data Enumeration Across Salesforce Aura / LWR and ServiceNow Guest Search

#security #threatintel

6 min read

Anoymask

Aug 13

WindRelay + SpyNote: Phone Remote Control and NFC Relay for Loan and Card Fraud

#security #threatintel

6 min read

Anoymask

Aug 13

Lazarus "Operation Dream Job": From Windows Zero-Day to EDR Bypass and Backdoor Deployment

#security #threatintel

6 min read

Anoymask

Aug 12

Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

#security #threatintel

11 min read

Anoymask

Aug 12

Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

#security #threatintel

9 min read

Anoymask

Aug 11

BdThemes API-Driven Supply Chain Compromise: Admin XSS to Web Shell and Hidden Admin

#security #threatintel

8 min read

Anoymask

Aug 11

Ghostjacking: Turning Logs and Alerts into Commands to Take Over AI Agents

#security #threatintel

1

4

8 min read

Anoymask

Aug 11

Disruption of Polish CHP: Wind Farm to OT via Private APN

#security #threatintel

2

8 min read

Anoymask

Aug 9

Head Mare Breaches TrueConf: From SYSTEM Privileges to Trojanized Legitimate Client Updates

#security #threatintel

9 min read

Anoymask

Aug 9

RovoBlast: One-Click Hijacking of Enterprise AI Permissions for Data Exfiltration

#security #threatintel

8 min read

Anoymask

Aug 8

Metabase Unauthenticated SQL Injection: From Admin Privilege Heist to Connected DB Data Theft

#security #threatintel

7 min read

Anoymask

Aug 8

VMware ESX Shell Obfuscation: 21 Techniques Work with BusyBox and Bypass Plaintext Keyword Detection

#security #threatintel

7 min read

Anoymask

Aug 7

UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

#security #threatintel

5 min read

Anoymask

Aug 7

Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE

#security #threatintel

5 min read

Anoymask

Aug 7

TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

#security #threatintel

5 min read

Anoymask

Aug 7

TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited

#security #threatintel

5 min read

Anoymask

Aug 6

COLDCARD Audit Phishing: 25.7MB Batch File Embeds ScreenConnect and Uses Chat to Trick Admins into Running It

#security #threatintel

2

8

7 min read

Anoymask

Aug 6

Langflow CVE-2026-9198: Active Exploitation RCE via Auto-Login Superuser Token and Code Validator `exec()` Chain

#security #threatintel

7 min read

Anoymask

Aug 6

khunt: SQL Injection to Resident Threat Inside Oracle Database Stealing Credentials with SYSTEM Privileges

#security #threatintel

7 min read

Anoymask

Aug 5

ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

#security #threatintel

8 min read

Anoymask

Aug 5

Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents

#security #threatintel

7 min read

Anoymask

Aug 5

TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditions

#security #threatintel

7 min read

Anoymask

Aug 5

Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,090 Issues

#security #threatintel

7 min read

Anoymask

Aug 5

Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

#security #threatintel

7 min read

Anoymask

Aug 4

VPS.org One-Click Template: Public PostgreSQL Fixed Password and Zulip Session Forgery

#security #threatintel

5 min read

Anoymask

Aug 4

N-central CVE-2026-18577: Lateral Movement from RMM Admin Rights to Customer Endpoints and Persistence via Cloudflare Tunnel

#security #threatintel

6 min read

Anoymask

Aug 4

CC-Link IE TSN CVE-2026-13584: OT Protocol Vulnerability Enabling Control I/O Value Tampering from Adjacent Networks

#security #threatintel

5 min read

Anoymask

Aug 4

DOUBLECUP: ClickFix Loader-as-a-Service Restoring Fileless Payload from PNG in Browser Cache

#security #threatintel

6 min read

Anoymask

Aug 3

COLDCARD Predictable RNG: From Seed Recovery to About $8.86M Bitcoin Theft

#security #threatintel

11 min read

Anoymask

Aug 1

Adform Delivery Script Compromised: Wallet Addresses Replaced on Clipboard and Screen

#security #threatintel

5 min read

Anoymask

Aug 1

Boundary Escape in Claude Evaluation Environment: Real-World Incidents at 3 Organizations and Malicious PyPI Package Publication

#security #threatintel

6 min read

Anoymask

Aug 1

XCSSET v40: From Xcode Supply Chain to Memory-Resident and Browser/Telegram Hijacking

#security #threatintel

6 min read

Anoymask

Aug 1

Water OT Attack Targeting Public PLCs: Locking Out Operators via Password and IP Changes

#security #threatintel

1

7

5 min read

Anoymask

Aug 1

DeepSeek and Hermes: An Autonomous Attack Platform for Reconnaissance, PoC Acquisition, and Target Selection

#security #threatintel

5 min read

Anoymask

Jul 31

STAC4749: Chaos Ransomware in Under 17 Hours via Teams IT Support Scam

#security #threatintel

5 min read

Anoymask

Jul 31

GTIG: 2026 OSS Supply Chain Compromise, Credential Theft, and Self-Propagation

#security #threatintel

5 min read

Anoymask

Jul 31

TA488 OWAReaper: A "Half-Click" Attack that Adds Persistence Inside OWA Just by Opening an Email

#security #threatintel

5 min read

Anoymask

Jul 31

KindaRails2Shell (CVE-2026-66066): Arbitrary File Read and RCE via Active Storage Uploads

#security #threatintel

4 min read

Anoymask

Jul 31

RufRoot (CVE-2026-59726): Full Compromise of AI Agent Infrastructure via Unauthenticated MCP Bridge

#security #threatintel

5 min read

Anoymask

Jul 30

ShinyHunters: Breaking Help Desks via Vishing and Bulk Stealing SaaS via SSO

#security #threatintel

6 min read

Anoymask

Jul 30

Cisco FMC CVE-2026-20316: Active Exploitation Chain from Static Credentials to Management Infrastructure Compromise

#security #threatintel

6 min read

Anoymask

Jul 30

OpenAI and Hugging Face: Autonomous AI Agent Chains Zero-Day, Credentials, and Cloud Lateral Movement

#security #threatintel

7 min read

Anoymask

Jul 30

VMware VMSA-2026-0006: vCenter Authentication Bypass / RCE and ESXi VM Escape

#security #threatintel

6 min read

Anoymask

Jul 29

Cisco Talos IR Q2 2026: Observed Attack Chains of M365 Token Compromise and RMM-Disguised Ransomware

#security #threatintel

7 min read

Anoymask

Jul 29

Fastjson 1.x CVE-2026-16723: Unauthenticated RCE Targeting Default Spring Boot Fat-Jars

#security #threatintel

6 min read

Anoymask

Jul 29

ELECOM Wireless LAN Devices JVN#56870912: OS Command Injection in Management Screen and Configuration Restoration

#security #threatintel

5 min read

Anoymask

Jul 29

vBulletin CVE-2026-61511: Unauthenticated RCE via Public AJAX Template to `eval()`

#security #threatintel

5 min read

Anoymask

Jul 29

IPMI/BMC Authentication Hash Leak: Stealing Out-of-Band Server Management via Offline Cracking

#security #threatintel

5 min read

Anoymask

Jul 28

Dysphoria: A 200k-Device Botnet Using Blockchain Name Resolution and Infected Device Relays

#security #threatintel

5 min read

Anoymask

Jul 28

Public Wi‑Fi DNS Poisoning: Hijacking Microsoft 365 Sessions of Business Travelers

#security #threatintel

5 min read

Anoymask

Jul 28

FortiOS CVE-2025-68686: Bypass of Symlink Persistence Mitigation for Already Compromised Devices

#security #threatintel

4 min read

Anoymask

Jul 28

Certighost CVE-2026-54121: Low-Privilege Users Impersonate a DC via AD CS

#security #threatintel

5 min read

Anoymask

Jul 28

MedusaHVNC: Remote Control of Logged-in Browsers on Hidden Windows Desktops

#security #threatintel

4 min read

Anoymask

Jul 28

VeloCloud Orchestrator CVE-2026-16812: Unauthenticated OS Command Injection Actively Exploited

#security #threatintel

5 min read

Anoymask

Jul 27

Steam Forum ClickFix: Fake Repair Commands Lead to XMRig SYSTEM Persistence

#security #threatintel

12 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with Anoymask?