DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
ConnectWise Cloud Backup Breach: Stolen App Credentials Used to Compromise Microsoft 365 Tenants

ConnectWise Cloud Backup Breach: Stolen App Credentials Used to Compromise Microsoft 365 Tenants

1
Comments
10 min read
Drupal CVE-2026-108097 and CVE-2026-108099: Pre-Authentication RCE Vectors in Field UI and Entity List

Drupal CVE-2026-108097 and CVE-2026-108099: Pre-Authentication RCE Vectors in Field UI and Entity List

1
Comments
8 min read
PwnEscape: Guest-to-Host KVM Escape and Host Memory Leak via Linux Checksum Processing (CVE-2026-99999)

PwnEscape: Guest-to-Host KVM Escape and Host Memory Leak via Linux Checksum Processing (CVE-2026-99999)

1
Comments
10 min read
BlockStrap / CVE-2026-103849: Unauthenticated RCE via Two-Stage Directive Processing in Magento and Adobe Commerce

BlockStrap / CVE-2026-103849: Unauthenticated RCE via Two-Stage Directive Processing in Magento and Adobe Commerce

2
Comments
7 min read
ICS-Sniper: Estimating Critical Time Windows in Encrypted SCADA Traffic for Targeted Packet Dropping

ICS-Sniper: Estimating Critical Time Windows in Encrypted SCADA Traffic for Targeted Packet Dropping

1
Comments
8 min read
Langflow CVE-2026-105740: RCE via Authenticated MCP Stdio, 2,023 Exploitation Attempts Observed

Langflow CVE-2026-105740: RCE via Authenticated MCP Stdio, 2,023 Exploitation Attempts Observed

1
Comments
7 min read
BeyondTrust CVE-2026-102764: ARMORY CASTLE Exploits Zero-Day to Deploy SAWFLY and BARECLAW

BeyondTrust CVE-2026-102764: ARMORY CASTLE Exploits Zero-Day to Deploy SAWFLY and BARECLAW

1
Comments
8 min read
ThreatsDay Threat Cluster: Adobe RCE, DNS Wallet Theft, Container Escapes

ThreatsDay Threat Cluster: Adobe RCE, DNS Wallet Theft, Container Escapes

Comments
7 min read
AdFection: Zero-Click Chain Delivering Candiru Spyware via Targeted Ads Without User Interaction

AdFection: Zero-Click Chain Delivering Candiru Spyware via Targeted Ads Without User Interaction

1
Comments
6 min read
CikaBika: Rust RAT Uses Discord C2; UAC Bypass and Edge DLL Placement Are Attempted

CikaBika: Rust RAT Uses Discord C2; UAC Bypass and Edge DLL Placement Are Attempted

1
Comments
7 min read
skynox7: D-Link, Ubiquiti, and SAP Devices Repurposed into Pawns.app Residential Proxies

skynox7: D-Link, Ubiquiti, and SAP Devices Repurposed into Pawns.app Residential Proxies

1
Comments
6 min read
Arch Linux AUR: Typosquatted yay and paru Packages Execute Remote Scripts with Root Privileges

Arch Linux AUR: Typosquatted yay and paru Packages Execute Remote Scripts with Root Privileges

1
Comments
5 min read
Collabora Online CVE-2026-110447: Pre-Authentication OS Command Injection in Nextcloud Built-in CODE Server

Collabora Online CVE-2026-110447: Pre-Authentication OS Command Injection in Nextcloud Built-in CODE Server

1
Comments
5 min read
UAT-6275 and TAG-193: Four Phishing Chains and Custom Reverse Shells Targeting Government Organizations

UAT-6275 and TAG-193: Four Phishing Chains and Custom Reverse Shells Targeting Government Organizations

1
Comments
8 min read
PAN-OS CVE-2026-0322: Authenticated Code Injection in Management Interface Leads to Root Privileges

PAN-OS CVE-2026-0322: Authenticated Code Injection in Management Interface Leads to Root Privileges

1
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.