DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Legitimate Service Abuse: Over 25 Platforms Repurposed for Fraud and Phishing Delivery

Legitimate Service Abuse: Over 25 Platforms Repurposed for Fraud and Phishing Delivery

1
Comments
5 min read
AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

1
Comments
7 min read
Operation FlashHole: Initial In-Memory Execution via CrossWeb EX and Post-Quantum Payload Protection

Operation FlashHole: Initial In-Memory Execution via CrossWeb EX and Post-Quantum Payload Protection

1
Comments
6 min read
Context Bombs: Misleading Offensive AI Agents into Decoys to Lower Success Rates and Economic Efficiency

Context Bombs: Misleading Offensive AI Agents into Decoys to Lower Success Rates and Economic Efficiency

1
Comments
6 min read
Amazon ClickFix: Deploying NetSupport, Lumma, and More Using finger.exe and .plan Files

Amazon ClickFix: Deploying NetSupport, Lumma, and More Using finger.exe and .plan Files

1
Comments
5 min read
Four Agentic AI Attack Campaigns: Delegating Healthcare, Government, and SaaS Breaches to Agents

Four Agentic AI Attack Campaigns: Delegating Healthcare, Government, and SaaS Breaches to Agents

1
Comments
6 min read
Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

1
Comments
6 min read
PHP2Shell: Two Pre-Authentication RCE Vulnerabilities in PHP Core with Confirmed Active Exploitation Attempts

PHP2Shell: Two Pre-Authentication RCE Vulnerabilities in PHP Core with Confirmed Active Exploitation Attempts

2
Comments
10 min read
OpenCode Console Compromise: Potential Exposure of External AI Provider API Keys and Unauthorized Charge Reports

OpenCode Console Compromise: Potential Exposure of External AI Provider API Keys and Unauthorized Charge Reports

1
Comments
7 min read
AOMEI Update Infrastructure Compromised: CROSSROAD and SHINYROAD Delivered in 5–10-Minute Tampering Windows

AOMEI Update Infrastructure Compromised: CROSSROAD and SHINYROAD Delivered in 5–10-Minute Tampering Windows

1
Comments
7 min read
Rank Math PRO 3.0.123 Supply Chain Compromise: Backdoor Can Regenerate on Page Visits

Rank Math PRO 3.0.123 Supply Chain Compromise: Backdoor Can Regenerate on Page Visits

1
Comments
7 min read
NGINX CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479: Memory Corruption in Non-Default Configurations

NGINX CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479: Memory Corruption in Non-Default Configurations

1
Comments
7 min read
Plex2Shell: Four-Vulnerability Chain Exploited the Day After PoC Release to Deploy Miners and Residential Proxies

Plex2Shell: Four-Vulnerability Chain Exploited the Day After PoC Release to Deploy Miners and Residential Proxies

1
Comments
7 min read
PwnEscape: Guest-to-Host KVM Escape and Host Memory Leak via Linux Checksum Processing (CVE-2026-99999)

PwnEscape: Guest-to-Host KVM Escape and Host Memory Leak via Linux Checksum Processing (CVE-2026-99999)

1
Comments
10 min read
Drupal CVE-2026-108097 and CVE-2026-108099: Pre-Authentication RCE Vectors in Field UI and Entity List

Drupal CVE-2026-108097 and CVE-2026-108099: Pre-Authentication RCE Vectors in Field UI and Entity List

1
Comments
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.