DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
VMware vCenter CVE-2026-59310: Active Exploitation of Unauthenticated RCE for Persistent Reverse SSH
anoymask profile

VMware vCenter CVE-2026-59310: Active Exploitation of Unauthenticated RCE for Persistent Reverse SSH

#security #threatintel
Comments
5 min read
Jewelbug: XG-Web Infrastructure Supporting Government Webmail Compromise and Browser Takeover
anoymask profile

Jewelbug: XG-Web Infrastructure Supporting Government Webmail Compromise and Browser Takeover

#security #threatintel
Comments
6 min read
Akira: Intrusion Stopping EDR via Safe Mode and Exfiltrating Data Before Encryption
anoymask profile

Akira: Intrusion Stopping EDR via Safe Mode and Exfiltrating Data Before Encryption

#security #threatintel
Comments
6 min read
JWR: A Real-Time PhaaS Using WebSockets to Monitor Victim Input and Remotely Control Screen Transitions
anoymask profile

JWR: A Real-Time PhaaS Using WebSockets to Monitor Victim Input and Remotely Control Screen Transitions

#security #threatintel
Comments
5 min read
Lazarus "Operation Dream Job": From Windows Zero-Day to EDR Bypass and Backdoor Deployment
anoymask profile

Lazarus "Operation Dream Job": From Windows Zero-Day to EDR Bypass and Backdoor Deployment

#security #threatintel
Comments
6 min read
Plug and Pwn: Getting Windows SYSTEM Privileges from Fake USB and RDP Devices
anoymask profile

Plug and Pwn: Getting Windows SYSTEM Privileges from Fake USB and RDP Devices

#security #threatintel
Comments
5 min read
WindRelay + SpyNote: Phone Remote Control and NFC Relay for Loan and Card Fraud
anoymask profile

WindRelay + SpyNote: Phone Remote Control and NFC Relay for Loan and Card Fraud

#security #threatintel
Comments
6 min read
City-Forum: Anonymous Data Enumeration Across Salesforce Aura / LWR and ServiceNow Guest Search
anoymask profile

City-Forum: Anonymous Data Enumeration Across Salesforce Aura / LWR and ServiceNow Guest Search

#security #threatintel
Comments
6 min read
Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption
anoymask profile

Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

#security #threatintel
Comments
11 min read
Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2
anoymask profile

Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

#security #threatintel
Comments
9 min read
BdThemes API-Driven Supply Chain Compromise: Admin XSS to Web Shell and Hidden Admin
anoymask profile

BdThemes API-Driven Supply Chain Compromise: Admin XSS to Web Shell and Hidden Admin

#security #threatintel
Comments
8 min read
Head Mare Breaches TrueConf: From SYSTEM Privileges to Trojanized Legitimate Client Updates
anoymask profile

Head Mare Breaches TrueConf: From SYSTEM Privileges to Trojanized Legitimate Client Updates

#security #threatintel
Comments
9 min read
RovoBlast: One-Click Hijacking of Enterprise AI Permissions for Data Exfiltration
anoymask profile

RovoBlast: One-Click Hijacking of Enterprise AI Permissions for Data Exfiltration

#security #threatintel
Comments
8 min read
VMware ESX Shell Obfuscation: 21 Techniques Work with BusyBox and Bypass Plaintext Keyword Detection
anoymask profile

VMware ESX Shell Obfuscation: 21 Techniques Work with BusyBox and Bypass Plaintext Keyword Detection

#security #threatintel
Comments
7 min read
Metabase Unauthenticated SQL Injection: From Admin Privilege Heist to Connected DB Data Theft
anoymask profile

Metabase Unauthenticated SQL Injection: From Admin Privilege Heist to Connected DB Data Theft

#security #threatintel
Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.