DEV Community

#threatintelligence

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Mapping Self-Hosted LLM API Gateways: What the CISA Distillation Advisory Means for Asset Owners

Mapping Self-Hosted LLM API Gateways: What the CISA Distillation Advisory Means for Asset Owners

Comments
2 min read
One shellcode, two names: what Volexity's UTA0560 finding says about attribution confidence

One shellcode, two names: what Volexity's UTA0560 finding says about attribution confidence

Comments
4 min read
Group-IB's August 2026 APAC Ransomware Data: What 190 Incidents Actually Tell You

Group-IB's August 2026 APAC Ransomware Data: What 190 Incidents Actually Tell You

Comments
2 min read
AI Has Tipped the Cyber Battlefield in Attackers' Favor, Microsoft Warns

AI Has Tipped the Cyber Battlefield in Attackers' Favor, Microsoft Warns

Comments
2 min read
Chosen Brick and HEAVYGRAM: Iranian Spyware That Reports Through Telegram

Chosen Brick and HEAVYGRAM: Iranian Spyware That Reports Through Telegram

Comments
2 min read
Transfer Stations in Plain Sight: Enumerating the API Resale Layer Described in the CISA Distillation Advisory

Transfer Stations in Plain Sight: Enumerating the API Resale Layer Described in the CISA Distillation Advisory

Comments
2 min read
Sanitization Leaves Traces: What Exposed AI Gateway Panels Reveal About Their Operators After AA26-251A

Sanitization Leaves Traces: What Exposed AI Gateway Panels Reveal About Their Operators After AA26-251A

Comments
1 min read
The 27-Day Window: What the BlueMoon Campaign Teaches About Commit-to-Release Gaps

The 27-Day Window: What the BlueMoon Campaign Teaches About Commit-to-Release Gaps

Comments
3 min read
MISP Feed Redirects Before 2.5.45: When an Outbound Request Carries Credentials to Another Host

MISP Feed Redirects Before 2.5.45: When an Outbound Request Carries Credentials to Another Host

1
Comments
3 min read
#4 on MalwareBazaar — what that proves, and what it does not

#4 on MalwareBazaar — what that proves, and what it does not

Comments
3 min read
Reading the Anthropic Threat Intelligence Report as a Defenders' Checklist, Not a News Cycle

Reading the Anthropic Threat Intelligence Report as a Defenders' Checklist, Not a News Cycle

Comments 1
3 min read
When a Certificate Becomes a Clue: Infrastructure Linking in the Toll Fraud Investigation

When a Certificate Becomes a Clue: Infrastructure Linking in the Toll Fraud Investigation

1
Comments 1
4 min read
Mapping a whole domain fleet from one reverse IP lookup

Mapping a whole domain fleet from one reverse IP lookup

1
Comments 1
10 min read
What Is OSINT and Why It Matters

What Is OSINT and Why It Matters

Comments
5 min read
🍌 pushed the badBANANA Threat Observatory public 🍌

🍌 pushed the badBANANA Threat Observatory public 🍌

7
Comments 4
2 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.