DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
File Change Notification Side Channel: Estimating Keystroke Timing and Browsing Activity on Linux, Android, and Windows

File Change Notification Side Channel: Estimating Keystroke Timing and Browsing Activity on Linux, Android, and Windows

1
Comments
7 min read
MemTensor MemOS Supply Chain Attack: sckit Triggered by Python Imports and OpenClaw Runtime Hooks

MemTensor MemOS Supply Chain Attack: sckit Triggered by Python Imports and OpenClaw Runtime Hooks

1
Comments
6 min read
SalesBleed: Zero-Click DNS Data Exfiltration from Agentforce Through Indirect Prompt Injection

SalesBleed: Zero-Click DNS Data Exfiltration from Agentforce Through Indirect Prompt Injection

1
Comments
5 min read
CARBONATO: A Botnet Built Around an AI Agent via Exposed Docker APIs

CARBONATO: A Botnet Built Around an AI Agent via Exposed Docker APIs

1
Comments
6 min read
SolarWinds Observability Self-Hosted: Two Pre-Authentication RCE Vulnerabilities Fixed with Different Configuration Requirements

SolarWinds Observability Self-Hosted: Two Pre-Authentication RCE Vulnerabilities Fixed with Different Configuration Requirements

1
Comments
6 min read
Roundcube CVE-2026-48842: Active Exploitation Reported for Pre-Authentication SQL Injection in virtuser_query

Roundcube CVE-2026-48842: Active Exploitation Reported for Pre-Authentication SQL Injection in virtuser_query

1
Comments
5 min read
TDengine CVE-2026-42542: Unauthenticated Integer Underflow Crashes taosd with a Single Packet

TDengine CVE-2026-42542: Unauthenticated Integer Underflow Crashes taosd with a Single Packet

2
Comments
6 min read
Elementor 4.3.0 and 4.3.1: CSRF Enables Administrator Account Creation via a Flawed REST Route Check

Elementor 4.3.0 and 4.3.1: CSRF Enables Administrator Account Creation via a Flawed REST Route Check

2
Comments
5 min read
RemControl: Android Banking Trojan Uses AI-Assisted Overlays and a Local VPN

RemControl: Android Banking Trojan Uses AI-Assisted Overlays and a Local VPN

1
Comments
6 min read
Kapibala: Government Data Theft via WordPress and Active Exploitation of Zyxel CVE-2026-7273

Kapibala: Government Data Theft via WordPress and Active Exploitation of Zyxel CVE-2026-7273

1
Comments
7 min read
TrustSink: Password Theft via a Rogue External MFA Provider in Microsoft Entra ID

TrustSink: Password Theft via a Rogue External MFA Provider in Microsoft Entra ID

1
Comments
6 min read
EvilTokens: AI-Powered PhaaS Abusing Device Code Authentication to Compromise Over 12,000 Mailboxes

EvilTokens: AI-Powered PhaaS Abusing Device Code Authentication to Compromise Over 12,000 Mailboxes

1
Comments
7 min read
LLM Relay Infrastructure: Over 80,000 Nodes Obscure User Attribution and Regional Controls

LLM Relay Infrastructure: Over 80,000 Nodes Obscure User Attribution and Regional Controls

1
Comments
7 min read
Check Point CVE-2026-93616: Actively Exploited Pre-Authentication Path Traversal Leading to Script Execution

Check Point CVE-2026-93616: Actively Exploited Pre-Authentication Path Traversal Leading to Script Execution

1
Comments
9 min read
BigDiskBuster: Public PoC Claims to Block Microsoft Defender Platform and Security Intelligence Updates

BigDiskBuster: Public PoC Claims to Block Microsoft Defender Platform and Security Intelligence Updates

1
Comments
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.