DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Sogou Input Method DNS Hijacking: DarkVigil Backdoor Deployment

Sogou Input Method DNS Hijacking: DarkVigil Backdoor Deployment

Comments
6 min read
APT29-Linked Mobile Watering Holes: Plerdy Compromise and iOS/Android Exploit Chains

APT29-Linked Mobile Watering Holes: Plerdy Compromise and iOS/Android Exploit Chains

1
Comments
7 min read
Burp AT: Automating CRLF-Powered Desync via HTTP Header Injection in Four Phases

Burp AT: Automating CRLF-Powered Desync via HTTP Header Injection in Four Phases

1
Comments
5 min read
SonicWall GMS EOL: Unauthenticated File Read and High-Privilege SQL Injection Without Patches

SonicWall GMS EOL: Unauthenticated File Read and High-Privilege SQL Injection Without Patches

1
Comments
6 min read
NIKKE PC Launcher Supply Chain Compromise: K2F Remote-Control Agent Distributed via Official CDN Scripts

NIKKE PC Launcher Supply Chain Compromise: K2F Remote-Control Agent Distributed via Official CDN Scripts

1
Comments
7 min read
DreamHost File Manager Breach: FTP/SFTP Credentials Accessed; Webmail Sessions May Have Been Exposed

DreamHost File Manager Breach: FTP/SFTP Credentials Accessed; Webmail Sessions May Have Been Exposed

1
Comments
6 min read
WordPress RCE: Active Exploitation & Attacker Methodology

WordPress RCE: Active Exploitation & Attacker Methodology

Comments
5 min read
Barracuda CVE-2026-116606 and CVE-2026-111560: ESG Authorization Bypass and Multi-Product Command Injection

Barracuda CVE-2026-116606 and CVE-2026-111560: ESG Authorization Bypass and Multi-Product Command Injection

Comments
7 min read
3AM Affiliate AI-Loop Automation: Ransom Operations Evolution

3AM Affiliate AI-Loop Automation: Ransom Operations Evolution

Comments
6 min read
cPGuard Supply Chain Compromise: Legitimate Auto-Update Distributes Backdoor and Root Credential Harvesting Script

cPGuard Supply Chain Compromise: Legitimate Auto-Update Distributes Backdoor and Root Credential Harvesting Script

1
Comments
9 min read
Node-RED CVE-2026-58115: Single-POST Attempts to Deploy Linux Payloads and Webshells

Node-RED CVE-2026-58115: Single-POST Attempts to Deploy Linux Payloads and Webshells

1
Comments
8 min read
3AM Ransomware: Signs of AI Assistance, AD Trust Changes, and Around 37 Systems Encrypted

3AM Ransomware: Signs of AI Assistance, AD Trust Changes, and Around 37 Systems Encrypted

1
Comments
9 min read
WorkOS Sales App Breach: ARTEX-Linked Reconnaissance and Exploit Attempts, CRM and Customer Conversation Data Access

WorkOS Sales App Breach: ARTEX-Linked Reconnaissance and Exploit Attempts, CRM and Customer Conversation Data Access

1
Comments
7 min read
Gorbag: WinRAR CVE-2025-8088 and BeautyStealer Used to Quickly Harvest Ukrainian Government and Defense Intelligence

Gorbag: WinRAR CVE-2025-8088 and BeautyStealer Used to Quickly Harvest Ukrainian Government and Defense Intelligence

1
Comments
9 min read
Weekly Threat Recap: Social Engineering to Supply Chain Poisoning

Weekly Threat Recap: Social Engineering to Supply Chain Poisoning

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.