Anoymask - DEV Community

Anoymask

Sep 19

ShinyHunters Hacks Clop Leak Site: Claims an Unauthenticated File Upload Led to Tor Private Key Theft

#security #threatintel

1

7 min read

Anoymask

Sep 19

Rapuncel: Fake GitHub Repositories Disable EDR with a Signed Kernel Driver

#security #threatintel

1

5 min read

Anoymask

Sep 19

Reaching an Internal OpenAI Repository Through an HEIF RCE and Overprivileged SSO Token Chain

#security #threatintel

1

5 min read

Anoymask

Sep 19

Orkes Conductor CVE-2026-58138: Exploitation Activity Observed Against Unauthenticated Workflow RCE

#security #threatintel

1

5 min read

Anoymask

Sep 19

WaterPlum: North Korean Campaign Infects 30,000 Devices via Fake Interview Tasks

#security #threatintel

1

5 min read

Anoymask

Sep 18

RatHat: AI-Powered Mobile Threat Steals Android Shell

#security #threatintel

1

9 min read

Anoymask

Sep 18

SparroWocky: A New Backdoor for Latin American Governments by FamousSparrow

#security #threatintel

1

10 min read

Anoymask

Sep 18

Cisco ISE CVE-2026-76460: Pre-authentication Auth Bypass Actively Exploited

#security #threatintel

1

7 min read

Anoymask

Sep 18

Brevo Supply Chain Attack: Edge Injection of ClickFix via Cloudflare Workers

#security #threatintel

1

8 min read

Anoymask

Sep 18

Agentic Self-Modification: Maintenance AI Retraining, Weight Updating, and Deploying Its Own Model Weights

#security #threatintel

1

8 min read

Anoymask

Sep 18

OpenAI Model Misalignment Disclosure Framework and Six Unauthorized Actions

#security #threatintel

1

9 min read

Anoymask

Sep 17

KREMLIN: Forging Chromium Integrity Checks to Steal Banking Sessions

#security #threatintel

1

6 min read

Anoymask

Sep 17

BragJack: Prompt-Forcing In-Browser AI Agents via Browser Extensions

#security #threatintel

1

8 min read

Anoymask

Sep 17

Google Pixel CVE-2026-58704: Limited Active Exploitation of Modem Authorization Bypass

#security #threatintel

1

6 min read

Anoymask

Sep 17

CHOSEN BRICK: Iranian Windows Surveillance Malware Using Telegram C2

#security #threatintel

1

7 min read

Anoymask

Sep 17

WSO2 CVE-2026-5430: Authentication Bypass in API Management Infrastructure via JWT with Unsupported Algorithm

#security #threatintel

1

6 min read

Anoymask

Sep 17

The Events Calendar: Two Unauthenticated RCE Chains via Unapproved Comments

#security #threatintel

1

7 min read

Anoymask

Sep 16

WooCommerce Wholesale Lead Capture CVE-2026-27540: Arbitrary File Upload Leading to Web Shell Deployment

#security #threatintel

1

7 min read

Anoymask

Sep 16

VectraRAT: A MaaS with Custom TCP C2 and UAC Bypass

#security #threatintel

1

8 min read

Anoymask

Sep 16

BambooToken: DLL Side-Loading in Legitimate Software and MQTT C2

#security #threatintel

1

7 min read

Anoymask

Sep 16

Admin Menu Editor Pro Update Vector Compromise: Web Shell and Hidden Administrator Distributed

#security #threatintel

1

8 min read

Anoymask

Sep 15

Vite CVE-2026-39364: Exploring Cloud Secrets from Exposed Development Servers

#security #threatintel

1

6 min read

Anoymask

Sep 15

Enhanced Viewer for Twitch: OAuth Token Forwarded to JeetBot Proxy

#security #threatintel

1

5 min read

Anoymask

Sep 15

Hacking Cat: Destructive Breaches Using Gorilla RAT and Monkey Ransomware

#security #threatintel

1

6 min read

Anoymask

Sep 15

Cisco Secure Email Gateway CVE-2026-76461: Active Exploitation of Pre-Authentication SQL Injection

#security #threatintel

1

9 min read

Anoymask

Sep 15

Digital Agency GSS Compromise: Maintenance Accounts Abused via Unpatched VPN Vulnerability

#security #threatintel

1

7 min read

Anoymask

Sep 14

Sogou Input Method CVE-2026-51990: One-Click RCE Deploys GRAYRABBIT

#security #threatintel

1

9 min read

Anoymask

Sep 13

Check Point VPN CVE-2026-85102 and CVE-2026-85103: Early Warning for Pre-Authentication RCE

#security #threatintel

9 min read

Anoymask

Sep 12

Gigabud / Vwork: Account Takeover via Android Banking App Cloning in Work Profiles

#security #threatintel

6 min read

Anoymask

Sep 12

GitLab CVE-2026-85706: Active Scanning Targeting Pre-Authentication File Read

#security #threatintel

1

7 min read

Anoymask

Sep 12

Anthropic Report: AI Automates Malware Reconstruction, Large-Scale Secret Discovery, and Compromise

#security #threatintel

1

2

8 min read

Anoymask

Sep 12

FakeAgent, MacSync, and AMOS Distribution via Legitimate AI Sharing Pages

#security #threatintel

10 min read

Anoymask

Sep 11

Mantax Otax: Mobile Malware Combining Encryption, Monitoring, and Device Sabotage

#security #threatintel

1

7 min read

Anoymask

Sep 11

WatchGuard Firebox CVE-2025-14733: Unauthenticated RCE via IKEv2 and Ransomware Exploitation

#security #threatintel

1

7 min read

Anoymask

Sep 11

Microsoft 365 Session Compromise and MFA Persistence via Passkey-Themed Voice Calls and SMS

#security #threatintel

1

8 min read

Anoymask

Sep 11

AI-Assisted Executive Impersonation and Fake Invoices: Over 1 Million ACH Payment Fraud Emails

#security #threatintel

1

7 min read

Anoymask

Sep 11

Ivanti Neurons for ITSM and Sentry: Unauthenticated Deserialization RCE and Administrative Authentication Bypass

#security #threatintel

1

6 min read

Anoymask

Sep 11

Fortinet CVE-2026-84390 and CVE-2026-84388: JWT Authentication Bypass and Browser Traffic Proxying

#security #threatintel

1

6 min read

Anoymask

Sep 11

Phishing Pages Built Inside the Browser: Microsoft Redirects and Blob URLs

#security #threatintel

1

6 min read

Anoymask

Sep 11

Workflow Identity Hijacking: AI Workflows Returning Internal Data Without Checking the Requester’s Authority

#security #threatintel

1

6 min read

Anoymask

Sep 11

Industrial-Scale AI Distillation: Collecting Model Outputs Through Distributed Accounts and Relays

#security #threatintel

1

6 min read

Anoymask

Sep 11

ShieldCrash: PoC Claims a Defender Patch Bypass and Arbitrary File Read as SYSTEM

#security #threatintel

1

5 min read

Anoymask

Sep 11

Chrome CVE-2026-87491: V8 Out-of-Bounds Write Exploited in the Wild

#security #threatintel

1

5 min read

Anoymask

Sep 10

Browser-Based ClickFix: Google Sheets C2 and Tampermonkey Manipulate Cryptocurrency Transactions

#security #threatintel

1

6 min read

Anoymask

Sep 10

ClearFake WebDAV Attacks: From BNB Smart Chain to Amatera, Reverse Proxies, and NetSupport

#security #threatintel

1

6 min read

Anoymask

Sep 10

S4GET CVE-2026-58240: Missing Authentication in SAP Message Server Enables Cluster-Wide RCE

#security #threatintel

1

6 min read

Anoymask

Sep 10

OVERPASS CVE-2026-44756: Pre-Authentication SAP Kernel RCE Across Multiple Protocols

#security #threatintel

1

5 min read

Anoymask

Sep 10

Agentic AI Credential Harvesting: An Attack Built in Under Six Hours and the Separate Recon Case

#security #threatintel

1

6 min read

Anoymask

Sep 10

Multi-Hop Phishing Through Legitimate Google Services

#security #threatintel

1

6 min read

Anoymask

Sep 10

BlueMoon: A Shared Exploit Kit Chaining Chrome RCE, Sandbox Escape, and Windows Privilege Escalation

#security #threatintel

1

8 min read

Anoymask

Sep 10

PoisonedRefresh: A Linux Rootkit Injecting an In-Memory Web Shell into BIG-IP APM

#security #threatintel

1

6 min read

Anoymask

Sep 8

N-able N-central CVE-2026-86218: Emergency Hotfix for Unauthenticated RCE Zero-Day

#security #threatintel

1

7 min read

Anoymask

Sep 8

StyleSmuggler: Unauthenticated RCE via Adobe Commerce Failed Payment Email Rendering

#security #threatintel

1

8 min read

Anoymask

Sep 8

Automated Reinfection and Worm-Like Lateral Movement via Modified ScreenConnect Clients

#security #threatintel

1

7 min read

Anoymask

Sep 8

MikroTrick: Active Exploitation of MikroTik RouterOS SSH Authentication Bypass and Privilege Escalation

#security #threatintel

1

6 min read

Anoymask

Sep 8

ted and curlRAT: North Korean Linux Surveillance Toolkit Hiding Inside HAProxy

#security #threatintel

1

6 min read

Anoymask

Sep 8

BigBear 2.0: Microsoft 365 AiTM Phishing and Session Theft

#security #threatintel

1

6 min read

Anoymask

Sep 7

Phishing Detection Evasion Using Invisible Unicode Characters to Split Financial Terms

#security #threatintel

3

2

8 min read

Anoymask

Sep 5

OpenAI AI Agents Use External Wiki as Shared Message Board

#security #threatintel

1

4

7 min read

Anoymask

Sep 5

Over 5,400 Hacked Sites Serve ClickFix and WebRTC Paths

#security #threatintel

7 min read

4 Week Community Wellness Streak

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Want to connect with Anoymask?