DEV Community

Mark0 profile picture

Mark0

404 bio not found

Joined Joined on 
NetNTLMv1 Is Dead. Long Live NetNTLMv1.

NetNTLMv1 Is Dead. Long Live NetNTLMv1.

Comments
1 min read
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

Comments
1 min read
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Comments
1 min read
[0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path without credential override (7.2)

[0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path without credential override (7.2)

Comments
1 min read
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2

ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2

Comments
1 min read
Stealing AI Reasoning Traces

Stealing AI Reasoning Traces

Comments
1 min read
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

Comments
1 min read
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Comments
1 min read
Testing race conditions with memory access tracing and stack-based delay injection

Testing race conditions with memory access tracing and stack-based delay injection

Comments
1 min read
7th September – Threat Intelligence Report

7th September – Threat Intelligence Report

Comments
1 min read
Magento StyleSmuggler zero-day exploited to deploy Linux backdoor

Magento StyleSmuggler zero-day exploited to deploy Linux backdoor

Comments
1 min read
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

Comments
1 min read
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Comments
1 min read
2026-08-31: Files for an ISC diary (Guildma/Astaroth infection)

2026-08-31: Files for an ISC diary (Guildma/Astaroth infection)

Comments
1 min read
2026-09-01: Essential macOS Stealer infection

2026-09-01: Essential macOS Stealer infection

Comments
1 min read
Angry Birds: Toy Ghouls’ new toys

Angry Birds: Toy Ghouls’ new toys

Comments
1 min read
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Comments
1 min read
OpenAI admits it didn't disclose rogue AI wiki hijacking incident

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

Comments
1 min read
AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

Comments
1 min read
2026-08-31: Files for an ISC diary (Guildma/Astaroth infection)

2026-08-31: Files for an ISC diary (Guildma/Astaroth infection)

Comments
1 min read
2026-09-01: Essential macOS Stealer infection

2026-09-01: Essential macOS Stealer infection

Comments
1 min read
Data access: the hidden cost of security vendor lock-in

Data access: the hidden cost of security vendor lock-in

Comments
1 min read
The story behind the intelligence

The story behind the intelligence

Comments
1 min read
Angry Birds: Toy Ghouls’ new toys

Angry Birds: Toy Ghouls’ new toys

Comments
1 min read
Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

Comments
1 min read
Flextype v1.0.0-alpha.3 Stored Expression Injection Enables PHP Remote Code Execution

Flextype v1.0.0-alpha.3 Stored Expression Injection Enables PHP Remote Code Execution

Comments
1 min read
HPE patches critical ArubaOS-CX remote code execution flaw

HPE patches critical ArubaOS-CX remote code execution flaw

Comments
1 min read
OpenAI admits it didn't disclose rogue AI wiki hijacking incident

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

Comments
1 min read
AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

Comments
1 min read
waf-fu, or Some Log Replay Nonsense

waf-fu, or Some Log Replay Nonsense

Comments
1 min read
Overview of Content Published in August

Overview of Content Published in August

Comments
1 min read
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks

CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks

Comments
1 min read
[webapps] Ghost_CMS 6.19.0 - Remote Code Execution

[webapps] Ghost_CMS 6.19.0 - Remote Code Execution

Comments
1 min read
This month in security with Tony Anscombe – August 2026 edition

This month in security with Tony Anscombe – August 2026 edition

Comments
1 min read
Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Comments
1 min read
An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation

An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation

Comments
1 min read
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Comments
1 min read
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

Comments
1 min read
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Comments
1 min read
Red Team AI Skills

Red Team AI Skills

Comments
1 min read
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another

Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another

Comments
1 min read
Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Comments
1 min read
This month in security with Tony Anscombe – August 2026 edition

This month in security with Tony Anscombe – August 2026 edition

Comments
1 min read
Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Comments
1 min read
Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Comments
1 min read
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks

Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks

Comments
1 min read
Critical Langflow flaw exploited to steal OpenAI and AWS keys

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Comments
1 min read
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Comments
1 min read
Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Comments
1 min read
31th August – Threat Intelligence Report

31th August – Threat Intelligence Report

Comments
1 min read
ValleyRAT masquerading as adware

ValleyRAT masquerading as adware

Comments
1 min read
Agents of Chaos: A New $100K Agentic Security Challenge

Agents of Chaos: A New $100K Agentic Security Challenge

Comments
1 min read
[webapps] CubeCart 6.7.4 - SQL injection

[webapps] CubeCart 6.7.4 - SQL injection

Comments
1 min read
Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Comments
1 min read
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Comments
1 min read
China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

Comments
1 min read
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Comments
1 min read
Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

Comments
1 min read
When it Snows it Pours – Anatomy of a ServiceNow Red Team

When it Snows it Pours – Anatomy of a ServiceNow Red Team

Comments
1 min read
The Good, the Bad and the Ugly in Cybersecurity – Week 35

The Good, the Bad and the Ugly in Cybersecurity – Week 35

Comments
1 min read
loading...