DEV Community

Mark0 profile picture

Mark0

404 bio not found

Joined Joined on 
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Comments
1 min read
Citrix confirms two NetScaler RCE zero-days exploited in attacks

Citrix confirms two NetScaler RCE zero-days exploited in attacks

Comments
1 min read
1 little known secret of UIEOrchestratorStub.exe

1 little known secret of UIEOrchestratorStub.exe

Comments
1 min read
1 little known secret of WinCsFlags.exe

1 little known secret of WinCsFlags.exe

Comments
1 min read
1 little known secret of aidd.dll

1 little known secret of aidd.dll

Comments
1 min read
2026-09-24: Files for an ISC Diary (Macfinger ClickFix activity)

2026-09-24: Files for an ISC Diary (Macfinger ClickFix activity)

Comments
1 min read
Is that vibe coded app safe? 5 checks before you download

Is that vibe coded app safe? 5 checks before you download

Comments
1 min read
MacSync under the microscope: new delivery methods and a new payload

MacSync under the microscope: new delivery methods and a new payload

Comments
1 min read
CrowdStrike Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026

CrowdStrike Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026

Comments
1 min read
Trust and the enticing consultancy offer

Trust and the enticing consultancy offer

Comments
1 min read
3 Consulting Myths Debunked by Unit 42 Experts

3 Consulting Myths Debunked by Unit 42 Experts

Comments
1 min read
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

Comments
1 min read
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence

PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence

Comments
1 min read
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Comments
1 min read
The Closed Quorum: Inside the first reported autonomous AI C2 implant

The Closed Quorum: Inside the first reported autonomous AI C2 implant

Comments
1 min read
EDR Evasion Stack Helps Process Injection Slip Past Defenses

EDR Evasion Stack Helps Process Injection Slip Past Defenses

Comments
1 min read
UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks

UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks

Comments
1 min read
2026-09-14: Backdoor using ScreenConnect from malicious emailt

2026-09-14: Backdoor using ScreenConnect from malicious emailt

Comments
1 min read
2026-09-15: SmartApeSG ClickFix to unidentified RAT to MeshAgent

2026-09-15: SmartApeSG ClickFix to unidentified RAT to MeshAgent

Comments
1 min read
2026-09-17: Seven days of scans and probes and web traffic hitting my web server

2026-09-17: Seven days of scans and probes and web traffic hitting my web server

Comments
1 min read
Cloud Threat Emulation on Autopilot: Context is Everything

Cloud Threat Emulation on Autopilot: Context is Everything

Comments
1 min read
From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies

From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies

Comments
1 min read
Introducing CAIRN: Frontier tracking for AI-integrated malware

Introducing CAIRN: Frontier tracking for AI-integrated malware

Comments
1 min read
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Comments
1 min read
HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)

HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)

Comments
1 min read
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

Comments
1 min read
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

Comments
1 min read
The Closed Quorum: Inside the first reported autonomous AI C2 implant

The Closed Quorum: Inside the first reported autonomous AI C2 implant

Comments
1 min read
21st September – Threat Intelligence Report

21st September – Threat Intelligence Report

Comments
1 min read
From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies

From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies

Comments
1 min read
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Comments
1 min read
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

Comments
1 min read
Malicious npm packages evade install-script defenses at runtime

Malicious npm packages evade install-script defenses at runtime

Comments
1 min read
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

Comments
1 min read
Windows Exploitation Techniques: Dangling COM Object Registrations

Windows Exploitation Techniques: Dangling COM Object Registrations

Comments
1 min read
2026-09-14: Backdoor using ScreenConnect from malicious emailt

2026-09-14: Backdoor using ScreenConnect from malicious emailt

Comments
1 min read
2026-09-15: SmartApeSG ClickFix to unidentified RAT to MeshAgent

2026-09-15: SmartApeSG ClickFix to unidentified RAT to MeshAgent

1
Comments
1 min read
2026-09-17: Seven days of scans and probes and web traffic hitting my web server

2026-09-17: Seven days of scans and probes and web traffic hitting my web server

1
Comments
1 min read
‘Nudify’ apps: What to do if someone makes a fake nude of you

‘Nudify’ apps: What to do if someone makes a fake nude of you

Comments
1 min read
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Comments
1 min read
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

Comments
1 min read
Malicious npm packages evade install-script defenses at runtime

Malicious npm packages evade install-script defenses at runtime

Comments
1 min read
A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity

A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity

Comments
1 min read
CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026

CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026

Comments
1 min read
Should you care about an “AI slowdown?”

Should you care about an “AI slowdown?”

Comments
1 min read
The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents

The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents

Comments
1 min read
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Comments
1 min read
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Comments
1 min read
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

Comments
1 min read
Win11_26H2 build xta phantom libraries

Win11_26H2 build xta phantom libraries

Comments
1 min read
14th September – Threat Intelligence Report

14th September – Threat Intelligence Report

Comments
1 min read
NightEagle targets Russian companies

NightEagle targets Russian companies

Comments
1 min read
PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

Comments
1 min read
CrowdStrike Accelerates Real-Time Data Classification with On-Device AI

CrowdStrike Accelerates Real-Time Data Classification with On-Device AI

Comments
1 min read
Securing the unpatchable in an age of AI-driven vulnerabilities

Securing the unpatchable in an age of AI-driven vulnerabilities

Comments
1 min read
Atomic macOS (AMOS) Stealer Activity

Atomic macOS (AMOS) Stealer Activity

Comments
1 min read
25 Years of Mass Surveillance Is Enough

25 Years of Mass Surveillance Is Enough

Comments
1 min read
VectraRAT Can Hack Windows Enterprises for $250 per Month

VectraRAT Can Hack Windows Enterprises for $250 per Month

Comments
1 min read
Malware bypasses browser checks to force install Chrome, Edge extensions

Malware bypasses browser checks to force install Chrome, Edge extensions

Comments
1 min read
Win11_26H2 build xta phantom libraries

Win11_26H2 build xta phantom libraries

Comments
1 min read
loading...