Anoymask - DEV Community

Anoymask

Sep 26

Elementor 4.3.0 and 4.3.1: CSRF Enables Administrator Account Creation via a Flawed REST Route Check

#security #threatintel

1

5 min read

Anoymask

Sep 26

TDengine CVE-2026-42542: Unauthenticated Integer Underflow Crashes taosd with a Single Packet

#security #threatintel

1

6 min read

Anoymask

Sep 26

File Change Notification Side Channel: Estimating Keystroke Timing and Browsing Activity on Linux, Android, and Windows

#security #threatintel

1

7 min read

Anoymask

Sep 26

MemTensor MemOS Supply Chain Attack: sckit Triggered by Python Imports and OpenClaw Runtime Hooks

#security #threatintel

1

6 min read

Anoymask

Sep 26

SalesBleed: Zero-Click DNS Data Exfiltration from Agentforce Through Indirect Prompt Injection

#security #threatintel

1

5 min read

Anoymask

Sep 25

Exposed GitLab Incoming Email Tokens Allow Unauthorized Code Modifications and CI Execution

#security #threatintel

1

6 min read

Anoymask

Sep 25

Roundcube CVE-2026-48842: Active Exploitation Reported for Pre-Authentication SQL Injection in virtuser_query

#security #threatintel

1

5 min read

Anoymask

Sep 25

SolarWinds Observability Self-Hosted: Two Pre-Authentication RCE Vulnerabilities Fixed with Different Configuration Requirements

#security #threatintel

1

6 min read

Anoymask

Sep 25

CARBONATO: A Botnet Built Around an AI Agent via Exposed Docker APIs

#security #threatintel

1

6 min read

Anoymask

Sep 24

Arista VeloCloud Orchestrator CVE-2026-93952: Active Exploitation of Authentication Bypass Zero-Day

#security #threatintel

1

6 min read

Anoymask

Sep 24

F5 BIG-IP APM CVE-2026-94127: Pre-authentication RCE Zero-Day Targeting OAuth Configurations

#security #threatintel

1

6 min read

Anoymask

Sep 24

Autonomous AI Agents Breach Online Retailers in Chained Attacks to Steal Payment Card Data

#security #threatintel

1

8 min read

Anoymask

Sep 24

RemControl: Android Banking Trojan Uses AI-Assisted Overlays and a Local VPN

#security #threatintel

1

6 min read

Anoymask

Sep 24

WordPress CVE-2026-87902: Probing and PHP File-Write Attempts Observed on Patch Day

#security #threatintel

1

7 min read

Anoymask

Sep 23

Check Point CVE-2026-93616: Actively Exploited Pre-Authentication Path Traversal Leading to Script Execution

#security #threatintel

1

9 min read

Anoymask

Sep 23

BigDiskBuster: Public PoC Claims to Block Microsoft Defender Platform and Security Intelligence Updates

#security #threatintel

1

8 min read

Anoymask

Sep 23

CLOSEDQUORUM: An Autonomous Windows Implant Using Multiple LLMs for Attack Decisions

#security #threatintel

1

7 min read

Anoymask

Sep 23

D-Link DIR-822A: Pre-authentication DHCP Buffer Overflow and L2TP Out-of-Bounds Write

#security #threatintel

1

6 min read

Anoymask

Sep 23

Kapibala: Government Data Theft via WordPress and Active Exploitation of Zyxel CVE-2026-7273

#security #threatintel

1

7 min read

Anoymask

Sep 23

EvilTokens: AI-Powered PhaaS Abusing Device Code Authentication to Compromise Over 12,000 Mailboxes

#security #threatintel

1

7 min read

Anoymask

Sep 23

LLM Relay Infrastructure: Over 80,000 Nodes Obscure User Attribution and Regional Controls

#security #threatintel

1

7 min read

Anoymask

Sep 23

TrustSink: Password Theft via a Rogue External MFA Provider in Microsoft Entra ID

#security #threatintel

1

6 min read

Anoymask

Sep 22

Colorado Small Water Utility OT Breaches: Attackers Alter Settings, Disable Alarms, and Change Pumping Cycles

#security #threatintel

1

5 min read

Anoymask

Sep 22

BigCommerce Third-Party App Compromise: Malicious Script Injected into Storefronts via Ribon Credentials

#security #threatintel

1

5 min read

Anoymask

Sep 22

Three Linux Kernel Vulnerabilities Added to CISA KEV: Active Exploitation Reported in AF_ALG, ebtables, and kTLS

#security #threatintel

1

6 min read

Anoymask

Sep 22

CrowdSec Source Code Leak: GitHub OAuth Token Abused in TanStack Supply Chain Attack

#security #threatintel

1

7 min read

Anoymask

Sep 22

Click2Shell: One-Click Chain from Automatic WordPress Theme Installation to PHP Execution

#security #threatintel

1

6 min read

Anoymask

Sep 22

Gemini Accessed Three Real Companies During a Security Evaluation via Password Guessing and Publicly Exposed Credentials

#security #threatintel

1

6 min read

Anoymask

Sep 21

Overpatch and Heapjack: Two Techniques for Bypassing Codex's Write Restrictions and Escaping Its Read-Only Sandbox

#security #threatintel

2

9 min read

Anoymask

Sep 21

indexed-btree: npm Supply Chain Malware Executes at Runtime and Uses a Smart Contract on Ethereum Sepolia for C2

#security #threatintel

1

8 min read

Anoymask

Sep 19

ShinyHunters Hacks Clop Leak Site: Claims an Unauthenticated File Upload Led to Tor Private Key Theft

#security #threatintel

1

6 min read

Anoymask

Sep 19

Rapuncel: Fake GitHub Repositories Disable EDR with a Signed Kernel Driver

#security #threatintel

1

5 min read

Anoymask

Sep 19

Reaching an Internal OpenAI Repository Through an HEIF RCE and Overprivileged SSO Token Chain

#security #threatintel

1

5 min read

Anoymask

Sep 19

Orkes Conductor CVE-2026-58138: Exploitation Activity Observed Against Unauthenticated Workflow RCE

#security #threatintel

1

2

5 min read

Anoymask

Sep 19

WaterPlum: North Korean Campaign Infects 30,000 Devices via Fake Interview Tasks

#security #threatintel

1

5 min read

Anoymask

Sep 18

RatHat: AI-Powered Mobile Threat Steals Android Shell

#security #threatintel

1

9 min read

Anoymask

Sep 18

SparroWocky: A New Backdoor for Latin American Governments by FamousSparrow

#security #threatintel

1

10 min read

Anoymask

Sep 18

Cisco ISE CVE-2026-76460: Pre-authentication Auth Bypass Actively Exploited

#security #threatintel

1

7 min read

Anoymask

Sep 18

Brevo Supply Chain Attack: Edge Injection of ClickFix via Cloudflare Workers

#security #threatintel

1

8 min read

Anoymask

Sep 18

Agentic Self-Modification: Maintenance AI Retraining, Weight Updating, and Deploying Its Own Model Weights

#security #threatintel

1

8 min read

Anoymask

Sep 18

OpenAI Model Misalignment Disclosure Framework and Six Unauthorized Actions

#security #threatintel

1

11 min read

Anoymask

Sep 17

KREMLIN: Forging Chromium Integrity Checks to Steal Banking Sessions

#security #threatintel

1

6 min read

Anoymask

Sep 17

BragJack: Prompt-Forcing In-Browser AI Agents via Browser Extensions

#security #threatintel

1

8 min read

Anoymask

Sep 17

Google Pixel CVE-2026-58704: Limited Active Exploitation of Modem Authorization Bypass

#security #threatintel

1

6 min read

Anoymask

Sep 17

CHOSEN BRICK: Iranian Windows Surveillance Malware Using Telegram C2

#security #threatintel

1

7 min read

Anoymask

Sep 17

WSO2 CVE-2026-5430: Authentication Bypass in API Management Infrastructure via JWT with Unsupported Algorithm

#security #threatintel

1

6 min read

Anoymask

Sep 17

The Events Calendar: Two Unauthenticated RCE Chains via Unapproved Comments

#security #threatintel

1

7 min read

Anoymask

Sep 16

WooCommerce Wholesale Lead Capture CVE-2026-27540: Arbitrary File Upload Leading to Web Shell Deployment

#security #threatintel

1

7 min read

Anoymask

Sep 16

VectraRAT: A MaaS with Custom TCP C2 and UAC Bypass

#security #threatintel

1

8 min read

Anoymask

Sep 16

BambooToken: DLL Side-Loading in Legitimate Software and MQTT C2

#security #threatintel

1

7 min read

Anoymask

Sep 16

Admin Menu Editor Pro Update Vector Compromise: Web Shell and Hidden Administrator Distributed

#security #threatintel

1

8 min read

Anoymask

Sep 15

Vite CVE-2026-39364: Exploring Cloud Secrets from Exposed Development Servers

#security #threatintel

1

6 min read

Anoymask

Sep 15

Enhanced Viewer for Twitch: OAuth Token Forwarded to JeetBot Proxy

#security #threatintel

1

5 min read

Anoymask

Sep 15

Hacking Cat: Destructive Breaches Using Gorilla RAT and Monkey Ransomware

#security #threatintel

1

6 min read

Anoymask

Sep 15

Cisco Secure Email Gateway CVE-2026-76461: Active Exploitation of Pre-Authentication SQL Injection

#security #threatintel

1

9 min read

Anoymask

Sep 15

Digital Agency GSS Compromise: Maintenance Accounts Abused via Unpatched VPN Vulnerability

#security #threatintel

1

7 min read

Anoymask

Sep 14

Sogou Input Method CVE-2026-51990: One-Click RCE Deploys GRAYRABBIT

#security #threatintel

1

9 min read

Anoymask

Sep 13

Check Point CVE-2026-85102: Active Exploitation of Spark VPN Pre-Authentication RCE

#security #threatintel

7 min read

Anoymask

Sep 12

Gigabud / Vwork: Account Takeover via Android Banking App Cloning in Work Profiles

#security #threatintel

6 min read

Anoymask

Sep 12

GitLab CVE-2026-85706: Active Scanning Targeting Pre-Authentication File Read

#security #threatintel

1

7 min read

4 Week Community Wellness Streak

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Want to connect with Anoymask?