Anoymask - DEV Community

Anoymask

Sep 5

NetScaler CVE-2026-19490: Attack Attempts Matching Authentication Bypass PoC Observed

#security #threatintel

1

7 min read

Anoymask

Sep 5

FalconFlank: Privilege Escalation PoC Abusing CrowdStrike Falcon's Macro Removal Process

#security #threatintel

1

7 min read

Anoymask

Sep 5

Chrome CVE-2026-85046: V8 Type Confusion Vulnerability Actively Exploited

#security #threatintel

1

6 min read

Anoymask

Sep 5

Intrusion Activity in Latin America: LLM Trial and Error and SOCKS5 Relay Operations

#security #threatintel

1

9 min read

Anoymask

Sep 5

BREEZE COMET: Breaching Financial Systems and Executing Fraudulent Transfers Using mTLS Credentials

#security #threatintel

8 min read

Anoymask

Sep 5

Elementor Pro CVE-2026-32475: Active Exploitation of PHP Web Shell via Array Validation Bypass

#security #threatintel

7 min read

Anoymask

Sep 5

Coder Registry Compromise: Malicious Server Added to Cloudflare Pool to Distribute Malicious Terraform Modules

#security #threatintel

8 min read

Anoymask

Sep 5

ArubaOS-CX CVE-2026-73749: Unauthenticated RCE via Input Processing Flaw in Daemon

#security #threatintel

7 min read

Anoymask

Sep 3

CISA Adds Seven Known Exploited Vulnerabilities to Catalog: AI Infrastructure, Python Web Frameworks, SonicWall, VoIP, and Artifactory

#security #threatintel

7 min read

Anoymask

Sep 3

All-in-One WP Migration CVE-2026-19949: From Second-Order SQL Injection on Restore to Site Takeover

#security #threatintel

6 min read

Anoymask

Sep 2

Exploitation of JFrog Artifactory CVE-2026-82329: Unauthenticated Administrator Token Generation

#security #threatintel

1

5 min read

Anoymask

Sep 2

AI Experiment: Porting a PLC Exploit Takes Hours and Hundreds of Dollars

#security #threatintel

1

5 min read

Anoymask

Sep 2

METR AI Infrastructure Compromise: Fail-Open Authentication Leads to API Key Theft, SSH Persistence, and $600K in Unauthorized Usage

#security #threatintel

1

6 min read

Anoymask

Sep 2

Exploitation of Langflow CVE-2026-0768: From Unauthenticated Root RCE to Secret Theft and Lateral Movement

#security #threatintel

1

5 min read

Anoymask

Sep 1

Spring Ring: From Microsoft Teams Voice Phishing to RMM, RAT, and NTLM Relay

#security #threatintel

1

6 min read

Anoymask

Sep 1

Unauthenticated RCE, Privilege Escalation, and SQL Injection in ServiceNow AI Platform: Three CVSS 10.0 Vulnerabilities

#security #threatintel

1

5 min read

Anoymask

Sep 1

TerminalFix: Fake CAPTCHA to PNG Steganography and WebSocket Reverse Tunnels

#security #threatintel

6 min read

Anoymask

Sep 1

Fire Ant: Cisco IOS XR, TACACS, and Linux Management Infrastructure Hijacked into Spying and Access Platforms

#security #threatintel

6 min read

Anoymask

Aug 31

August 2026 Security Review: Management Planes, Identity, Supply Chain, AI, and OT

#security #threatintel

8 min read

Anoymask

Aug 30

Superior: Crypto and Credential Theft via Browser Extension Acquisition and Malicious Updates

#security #threatintel

8 min read

Anoymask

Aug 29

GiveWP CVE-2026-82222: RCE Chain from Unauthenticated Registration to PHP Object Injection

#security #threatintel

5 min read

Anoymask

Aug 29

PaperCut Authentication Bypass and Dynamic Class Loading: Pre-authentication RCE Chain Actively Exploited

#security #threatintel

6 min read

Anoymask

Aug 29

Zabbix agent CVE-2026-59781: Privilege Escalation via DLL Loading During Installation

#security #threatintel

4 min read

Anoymask

Aug 28

Citrix NetScaler CVE-2026-8452: SAML Heap Overflow to Root RCE and Web Shell Deployment

#security #threatintel

2

7 min read

Anoymask

Aug 28

TA4922 PackClient Attacks: From Tax Documents to DLL Side-Loading and RAT Deployment

#security #threatintel

2

5 min read

Anoymask

Aug 28

SPEAKINGSTONE and DARKLANTERN in ZBT-Based White-Label Routers: WAN-Accessible Root Shell and DNS Hijacking

#security #threatintel

2

5 min read

Anoymask

Aug 28

Safely Analyzing Obfuscated JavaScript: Step-by-Step Phishing Kit Restoration

#security #threatintel

2

5 min read

Anoymask

Aug 28

Nearly 700 Rogue AI Agents Coordinated in the Hugging Face Attack: Lateral Movement from Artifactory Across Multiple Regions

#security #threatintel

2

5 min read

Anoymask

Aug 27

Attacks on Water OT: Over 100 Internet-Exposed Systems Targeted in July

#security #threatintel

5 min read

Anoymask

Aug 27

When AI Infrastructure Becomes the Target: Attacks Observed on LiteLLM, RAGFlow, and Kestra

#security #threatintel

6 min read

Anoymask

Aug 27

NovaCookies: Microsoft 365 AiTM Exploiting Trusted Docusign and Microsoft Redirects

#security #threatintel

6 min read

Anoymask

Aug 27

Gitea CVE-2026-60004: Active Exploitation of RCE via diffpatch API to Install Git Hooks

#security #threatintel

5 min read

Anoymask

Aug 27

SharePoint Authentication Bypass and RCE Chain Attack Observed: CVE-2026-55040 / CVE-2026-63520

#security #threatintel

5 min read

Anoymask

Aug 27

Dark Caracal's New Malware GoCaracal: From SVG Phishing to Ethereum Backup C2

#security #threatintel

6 min read

Anoymask

Aug 26

Unit 42: Real-World Prevalence of 405 AI-Related Malware Samples and Evaluation of Existing Defenses

#security #threatintel

7 min read

Anoymask

Aug 26

Reconstructing JavaScript from HTML Tag Names: An XSS and WAF Blocklist Evasion Technique

#security #threatintel

6 min read

Anoymask

Aug 26

FURUNO FA-50: Hard-coded Credentials and Missing Authentication for Certain Settings (CVE-2026-59769 / CVE-2026-67578)

#security #threatintel

6 min read

Anoymask

Aug 26

CISA "A Tale of Two SOCs": Detection and Containment from Two Red Team Assessments

#security #threatintel

6 min read

Anoymask

Aug 26

Active Exploitation of Oracle HTTP Server / WebLogic Proxy Plug-in CVE-2026-21962

#security #threatintel

1

2

6 min read

Anoymask

Aug 25

Two Vulnerabilities Bypassing Signature Verification in miniOrange SAML SSO

#security #threatintel

1

10 min read

Anoymask

Aug 25

CVE-2026-75501: Calix Router WAN-side UPnP Exposes Internal Devices

#security #threatintel

1

10 min read

Anoymask

Aug 24

ToxicPanda 2.0 Chains VPN, Accessibility, and ADB

#security #threatintel

11 min read

Anoymask

Aug 23

JarService / zhima Malware Entering via Insecure Android Car Head Unit Update Paths

#security #threatintel

1

9 min read

Anoymask

Aug 22

E4del / PINHOLE Using FTP Banners for Command Retrieval

#security #threatintel

5 min read

Anoymask

Aug 22

TrueConf Server Exploitation: PhantomCore Delivered via CVE-2026-72529 / 72530

#security #threatintel

5 min read

Anoymask

Aug 22

Three Russian-Linked Clusters Abuse Legitimate Authentication Flows

#security #threatintel

6 min read

Anoymask

Aug 22

SynkLoader Deploying Multi-Stage Modules via Teams Phishing

#security #threatintel

5 min read

Anoymask

Aug 22

JavaScript Sandbox Escape via Type Confusion in isolated-vm

#security #threatintel

5 min read

Anoymask

Aug 21

Rust Crate Tampering: Multi-Stage Info-Stealer Malware Launched via build.rs

#security #threatintel

6 min read

Anoymask

Aug 21

MLflow CVE-2026-64849: Cloud Credential Theft via Webhook SSRF

#security #threatintel

6 min read

Anoymask

Aug 21

UAT-10147 AI-Assisted Intrusion and SPECTRE Malware

#security #threatintel

7 min read

Anoymask

Aug 21

Manic Android Malware: Information Theft via Transparent Overlays and Short-Range Device Relaying

#security #threatintel

6 min read

Anoymask

Aug 21

Zimbra CVE-2026-73570: Unauthenticated Command Injection via SMTP

#security #threatintel

6 min read

Anoymask

Aug 21

SilkParasite: Cloud C2 and Multi-Language RATs Targeting Central Asia

#security #threatintel

6 min read

Anoymask

Aug 20

LSHIY: Large-Scale Password Spraying Abusing ROPC and IPv6

#security #threatintel

5 min read

Anoymask

Aug 20

Operation CameraSwarm: Over 14,000 Dahua Cameras Compromised via Three Attack Vectors

#security #threatintel

6 min read

Anoymask

Aug 20

Active Exploitation of Windows IKE Extension RCE (CVE-2026-33824)

#security #threatintel

5 min read

Anoymask

Aug 20

AI-Generated Attack Tools Targeting Siemens S7 PLCs

#security #threatintel

5 min read

Anoymask

Aug 19

Forminator Forms (CVE-2026-15748): Unauthenticated RCE via Forged Upload Settings in Select Fields

#security #threatintel

1

6 min read

Anoymask

Aug 19

Clop's Windchill Web Shell: From Credential Decryption to Design Data Theft Inside the App

#security #threatintel

1

6 min read

4 Week Community Wellness Streak

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Want to connect with Anoymask?