Anoymask - DEV Community

Anoymask

Oct 18

PwnEscape: Guest-to-Host KVM Escape and Host Memory Leak via Linux Checksum Processing (CVE-2026-99999)

#security #threatintel

1

10 min read

Anoymask

Oct 18

Drupal CVE-2026-108097 and CVE-2026-108099: Pre-Authentication RCE Vectors in Field UI and Entity List

#security #threatintel

1

8 min read

Anoymask

Oct 18

ConnectWise Cloud Backup Breach: Stolen App Credentials Used to Compromise Microsoft 365 Tenants

#security #threatintel

1

10 min read

Anoymask

Oct 17

ICS-Sniper: Estimating Critical Time Windows in Encrypted SCADA Traffic for Targeted Packet Dropping

#security #threatintel

1

8 min read

Anoymask

Oct 17

BlockStrap / CVE-2026-103849: Unauthenticated RCE via Two-Stage Directive Processing in Magento and Adobe Commerce

#security #threatintel

2

7 min read

Anoymask

Oct 17

Langflow CVE-2026-105740: RCE via Authenticated MCP Stdio, 2,023 Exploitation Attempts Observed

#security #threatintel

1

7 min read

Anoymask

Oct 17

BeyondTrust CVE-2026-102764: ARMORY CASTLE Exploits Zero-Day to Deploy SAWFLY and BARECLAW

#security #threatintel

1

8 min read

Anoymask

Oct 17

AI-Assisted OT Lab Tests: Equipment Control in Just Over 16 Minutes After Perimeter Compromise; Robotic Arm in a Separate Test

#security #threatintel

1

6 min read

Anoymask

Oct 16

PAN-OS CVE-2026-0322: Authenticated Code Injection in Management Interface Leads to Root Privileges

#security #threatintel

1

5 min read

Anoymask

Oct 16

skynox7: D-Link, Ubiquiti, and SAP Devices Repurposed into Pawns.app Residential Proxies

#security #threatintel

1

6 min read

Anoymask

Oct 16

CikaBika: Rust RAT Uses Discord C2; UAC Bypass and Edge DLL Placement Are Attempted

#security #threatintel

1

7 min read

Anoymask

Oct 16

Collabora Online CVE-2026-110447: Pre-Authentication OS Command Injection in Nextcloud Built-in CODE Server

#security #threatintel

1

5 min read

Anoymask

Oct 16

AdFection: Zero-Click Chain Delivering Candiru Spyware via Targeted Ads Without User Interaction

#security #threatintel

1

6 min read

Anoymask

Oct 16

UAT-6275 and TAG-193: Four Phishing Chains and Custom Reverse Shells Targeting Government Organizations

#security #threatintel

1

8 min read

Anoymask

Oct 16

Arch Linux AUR: Typosquatted yay and paru Packages Execute Remote Scripts with Root Privileges

#security #threatintel

1

5 min read

Anoymask

Oct 15

PEERSTITCH: Theft of 500+ Firewall Configurations and Payload Injection into FortiGate Daemons

#security #threatintel

1

6 min read

Anoymask

Oct 15

Package Manager Integrity Study: Only 2 of 25 Verified All Downloads by Default in Tests

#security #threatintel

1

4 min read

Anoymask

Oct 15

Hirudo: Replaces Banking Apps to Tamper with Local Signature, Accessibility, and Play Integrity Checks

#security #threatintel

1

6 min read

Anoymask

Oct 15

SneakPeek: Claude Code Desktop Preview Can Exfiltrate Local Secrets After Repository Cloning and a File Review Request

#security #threatintel

1

6 min read

Anoymask

Oct 15

Storm-3119/Storm-2990: YAM Store and CoGUI Infrastructure Behind Over One Billion Phishing Emails and SMS Messages

#security #threatintel

1

7 min read

Anoymask

Oct 15

Cisco SEG CVE-2026-76519: Active Exploitation of a Vulnerability Allowing Root Command Execution

#security #threatintel

1

7 min read

Anoymask

Oct 14

Ghostscript CVE-2026-39919: Build-Dependent RCE via JPEG 2000 Heap Overflow

#security #threatintel

1

6 min read

Anoymask

Oct 14

Ivanti Connect Secure CVE-2026-104935: Authentication Bypass and Race Condition RCE to Root

#security #threatintel

1

8 min read

Anoymask

Oct 14

SAP Cloud SDK for Python CVE-2026-89111: OAuth2 Client Credentials Exfiltration via tenant_subdomain

#security #threatintel

1

6 min read

Anoymask

Oct 14

AssetView CVE-2026-101020: Privilege Escalation from Low-Privilege Windows User to SYSTEM

#security #threatintel

1

5 min read

Anoymask

Oct 14

Docker Hub CVE-2026-105445: PAT Reassigned to Target User During Account-to-Organization Conversion

#security #threatintel

1

6 min read

Anoymask

Oct 14

Multiple Vulnerabilities in Thelia 2.6.0 and 2.6.1 Leading to RCE via Upload, Smarty, and Translation Editing

#security #threatintel

1

7 min read

Anoymask

Oct 14

Windows Shell CVE-2026-96951: Mark of the Web Bypass Zero-Day Actively Exploited

#security #threatintel

1

6 min read

Anoymask

Oct 14

Self-Replicating AI Experiment: Deploying to IoT Nodes via Unauthenticated ADB to Form Decentralized Inference

#security #threatintel

1

6 min read

Anoymask

Oct 13

Bricksforge CVE-2026-85097: Unauthenticated RCE Attempted via GIF/PHP Polyglot

#security #threatintel

1

5 min read

Anoymask

Oct 13

Ledger Nano X Supply Chain Attack: LTE/eSIM Hardware Implant Steals Seed Phrases

#security #threatintel

1

6 min read

Anoymask

Oct 13

GitLab CVE-2026-97229: Unauthenticated RCE via Integer Overflow in CI/CD Regular Expression Compiler

#security #threatintel

1

5 min read

Anoymask

Oct 13

French Retail OT Breach: Remote Defrosting via Danfoss Controllers Causes Food Waste; Fires Under Probe

#security #threatintel

1

8 min read

Anoymask

Oct 13

AvisLoader: A Windows Malware Loader Combining Cloudflare ClickFix and Tox P2P C2

#security #threatintel

1

6 min read

Anoymask

Oct 13

Claude Evaluation Guardrail Breaches: Real-Server Command Execution, Form Submissions, and Token Workarounds Observed

#security #threatintel

1

7 min read

Anoymask

Oct 11

Insider Active Directory Sabotage: A Hidden VM Used to Schedule Account Deletions and Password Resets

#security #threatintel

1

7 min read

Anoymask

Oct 10

Citrix NetScaler CVE-2026-107406: Pre-Authentication RCE and DoS via SAML Configuration

#security #threatintel

1

6 min read

Anoymask

Oct 10

SonicWall SMA1000 CVE-2026-102255: SSRF Attack Attempts Targeting Internal CouchDB

#security #threatintel

2

6 min read

Anoymask

Oct 9

IDCF Cloud: Ransomware Disrupts Four Eastern Japan Zones; Customers Advised to Rebuild from Backups

#security #threatintel

1

4

5 min read

Anoymask

Oct 9

MATCHBOIL: UAC-0099 Targets Ukrainian Organizations with Two-Minute C2 Polling and Sandbox Evasion

#security #threatintel

1

4

5 min read

Anoymask

Oct 9

Flax Typhoon: MicroScan Scanned Japanese Airports; U.S. Seizes Seven Domains

#security #threatintel

1

3

6 min read

Anoymask

Oct 9

Cisco NX-OS: Four Critical Advisories Cover 11 CVEs, Including Root RCE and DoS

#security #threatintel

1

4

7 min read

Anoymask

Oct 9

Midnight Mimosa: Malware Preinstalled in Android Firmware for Ad Fraud and Residential Proxying

#security #threatintel

1

2

6 min read

Anoymask

Oct 9

FakeGit: A 17,610-Repository GitHub Campaign Delivering SmartLoader and StealC

#security #threatintel

1

2

6 min read

Anoymask

Oct 8

Microsoft FORGE: Three Lessons for Scaling Frontier AI Vulnerability Research

#security #threatintel

1

5 min read

Anoymask

Oct 8

PoeLLM: Compromising Public AI Servers for Cryptomining and Further Reconnaissance

#security #threatintel

1

6 min read

Anoymask

Oct 8

ARTEX: LLM-Integrated Penetration Testing Tool Used to Target South Korean Financial Institutions and Exfiltrate Data

#security #threatintel

1

6 min read

Anoymask

Oct 7

Fake AI Ads Phishing Uses Browser-in-the-Browser and Human Operators to Capture Credentials and MFA Codes

#security #threatintel

2

5

7 min read

Anoymask

Oct 7

Nikkei Reports Google Workspace Unauthorized Access and About 9,000 Phishing Emails via Microsoft 365

#security #threatintel

1

8 min read

Anoymask

Oct 7

Atlassian CVE-2026-21589: Unauthenticated Access to Files in Web Root Across Multiple Data Center Products

#security #threatintel

2

8 min read

Anoymask

Oct 6

Denmark CPR Breach: Legitimate Company Access Abused to Query Data on About 8.8 Million People

#security #threatintel

1

6 min read

Anoymask

Oct 6

Partisan Zmiy: Nearly Two Years of Access to a Healthcare Network

#security #threatintel

1

6 min read

Anoymask

Oct 6

Cling: IoT Backdoor Disguises C2 as STUN Traffic

#security #threatintel

1

7 min read

Anoymask

Oct 6

Rejetto HFS CVE-2026-61500: Predictable Signing Key Enables Admin Session Forgery and RCE

#security #threatintel

1

6 min read

Anoymask

Oct 5

Citrix NetScaler CVE-2026-88779: Actively Exploited SAML Memory Overflow Causes DoS

#security #threatintel

2

8 min read

Anoymask

Oct 4

Fortra BoKS: Predictable AD Passwords, Root Command Injection, and Pre-Authentication Memory Corruption

#security #threatintel

2

12 min read

Anoymask

Oct 4

DTU Breach: IAM Data Theft May Affect Up to 200,000 People

#security #threatintel

1

8 min read

Anoymask

Oct 3

CloudSyncD: Fake Zoom Installer Hides a Stolen Password with Zero-Width Unicode and Launches a macOS Backdoor

#security #threatintel

2

8 min read

Anoymask

Oct 3

GitLab AI Gateway CVE-2026-90970: Authenticated Command Execution via Prompt Template Sandbox Escape

#security #threatintel

1

2

6 min read

Anoymask

Oct 3

Dell CSM: Critical Flaws Enable Storage Admin Access and Kubernetes Privilege Escalation

#security #threatintel

1

8 min read

4 Week Community Wellness Streak

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Want to connect with Anoymask?