DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
October 2026 Security Review: Compromised "Legitimate Privileges" and the Boundaries of Distribution and AI Execution

October 2026 Security Review: Compromised "Legitimate Privileges" and the Boundaries of Distribution and AI Execution

1
Comments 1
9 min read
Binance $6.3B Theft: FBI Attribution to TraderTraitor and Suspected Signing Infrastructure Compromise

Binance $6.3B Theft: FBI Attribution to TraderTraitor and Suspected Signing Infrastructure Compromise

1
Comments
9 min read
VOLTA: Infostealer Uses LLMs to Assess Stolen Data and Prioritize High-Value Victims

VOLTA: Infostealer Uses LLMs to Assess Stolen Data and Prioritize High-Value Victims

1
Comments
7 min read
Northflank Breach: Suspected Environment Variable Leak and Unauthorized Use of Customer AI API Keys

Northflank Breach: Suspected Environment Variable Leak and Unauthorized Use of Customer AI API Keys

1
Comments
6 min read
TeamViewer CVE-2026-111585 and Related Flaws: Viewer RCE Risks and macOS Local Privilege Escalation

TeamViewer CVE-2026-111585 and Related Flaws: Viewer RCE Risks and macOS Local Privilege Escalation

1
Comments
5 min read
Cursor Marketplace Compromise: Malicious Claude Code Extensions Attempt SSH Backdoor Installation

Cursor Marketplace Compromise: Malicious Claude Code Extensions Attempt SSH Backdoor Installation

1
Comments
5 min read
WordPress Core Update Race: Potential Unauthenticated RCE During Full-Package Updates

WordPress Core Update Race: Potential Unauthenticated RCE During Full-Package Updates

1
Comments
4 min read
Polymarket Supply Chain Attack: Tampered Monitoring Script Abuses Active Sessions to Move Funds

Polymarket Supply Chain Attack: Tampered Monitoring Script Abuses Active Sessions to Move Funds

1
Comments
4 min read
Drupal Commerce Core CVE-2026-118539: Active Exploitation of Unauthenticated Access Bypass

Drupal Commerce Core CVE-2026-118539: Active Exploitation of Unauthenticated Access Bypass

1
Comments
4 min read
NetamLoader: XAML and AppDomainManager Loader Targeting Custom Government Windows Builds

NetamLoader: XAML and AppDomainManager Loader Targeting Custom Government Windows Builds

1
Comments
5 min read
Apache Struts JVN#82782759: @JsonAnySetter Authorization Bypass and Required Protection Settings

Apache Struts JVN#82782759: @JsonAnySetter Authorization Bypass and Required Protection Settings

Comments
8 min read
Cisco ASA/FTD CVE-2026-76418: Actively Exploited SSL VPN DoS with Secondary Authentication

Cisco ASA/FTD CVE-2026-76418: Actively Exploited SSL VPN DoS with Secondary Authentication

1
Comments
5 min read
Talos IR Q3 2026: Vishing, Remote Support Abuse, and BYOVD in Ransomware Incidents

Talos IR Q3 2026: Vishing, Remote Support Abuse, and BYOVD in Ransomware Incidents

1
Comments
5 min read
Project Quarry: Open-Source DSL to Detect Multi-Step AI Agent Attacks Using Finite-State Automata

Project Quarry: Open-Source DSL to Detect Multi-Step AI Agent Attacks Using Finite-State Automata

1
Comments
3 min read
NIK C2: Windows RAT with OpenAI API Abuse, RDP Session Hijacking, and Screen Locking

NIK C2: Windows RAT with OpenAI API Abuse, RDP Session Hijacking, and Screen Locking

1
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.