DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
LiteLLM 1.107.0 Supply Chain Compromise: Python Startup Hooks Steal Cloud and AI Credentials

LiteLLM 1.107.0 Supply Chain Compromise: Python Startup Hooks Steal Cloud and AI Credentials

3
Comments 2
8 min read
ISC BIND: Memory Corruption and Potential RCE via GSS-TSIG Replay, Plus Three Remote DoS Vulnerabilities

ISC BIND: Memory Corruption and Potential RCE via GSS-TSIG Replay, Plus Three Remote DoS Vulnerabilities

1
Comments
8 min read
Signal RingRTC CVE-2026-113380: Queue Saturation Can Keep Audio and Possibly Video Active After Hang-Up

Signal RingRTC CVE-2026-113380: Queue Saturation Can Keep Audio and Possibly Video Active After Hang-Up

1
Comments
7 min read
Arista VeloCloud On-Prem CVE-2026-114625: Actively Exploited SQL Injection Enables Operator Privilege Escalation

Arista VeloCloud On-Prem CVE-2026-114625: Actively Exploited SQL Injection Enables Operator Privilege Escalation

1
Comments
7 min read
Cisco Expressway CVE-2026-76466: Pre-Auth Root RCE via Persistent Cookies and Missing Client-Certificate Validation

Cisco Expressway CVE-2026-76466: Pre-Auth Root RCE via Persistent Cookies and Missing Client-Certificate Validation

1
Comments
6 min read
GitLab CVE-2026-110264: Pre-Authentication RCE via Integer Overflow in Regular Expression Compiler

GitLab CVE-2026-110264: Pre-Authentication RCE via Integer Overflow in Regular Expression Compiler

1
Comments
6 min read
Hackers use artificial intelligence in new system of attacks and extortion

Hackers use artificial intelligence in new system of attacks and extortion

Comments
2 min read
Operation FlashHole: Initial In-Memory Execution via CrossWeb EX and Post-Quantum Payload Protection

Operation FlashHole: Initial In-Memory Execution via CrossWeb EX and Post-Quantum Payload Protection

1
Comments
6 min read
Context Bombs: Misleading Offensive AI Agents into Decoys to Lower Success Rates and Economic Efficiency

Context Bombs: Misleading Offensive AI Agents into Decoys to Lower Success Rates and Economic Efficiency

1
Comments
6 min read
Amazon ClickFix: Deploying NetSupport, Lumma, and More Using finger.exe and .plan Files

Amazon ClickFix: Deploying NetSupport, Lumma, and More Using finger.exe and .plan Files

1
Comments
5 min read
Legitimate Service Abuse: Over 25 Platforms Repurposed for Fraud and Phishing Delivery

Legitimate Service Abuse: Over 25 Platforms Repurposed for Fraud and Phishing Delivery

1
Comments
5 min read
Four Agentic AI Attack Campaigns: Delegating Healthcare, Government, and SaaS Breaches to Agents

Four Agentic AI Attack Campaigns: Delegating Healthcare, Government, and SaaS Breaches to Agents

1
Comments
6 min read
AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

1
Comments
7 min read
Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

1
Comments
6 min read
PHP2Shell: Two Pre-Authentication RCE Vulnerabilities in PHP Core with Confirmed Active Exploitation Attempts

PHP2Shell: Two Pre-Authentication RCE Vulnerabilities in PHP Core with Confirmed Active Exploitation Attempts

2
Comments
10 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.