DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
PHP CVE-2026-115560: Unpatched RCE Risk from Serialization Handler Switching and Upload Progress

PHP CVE-2026-115560: Unpatched RCE Risk from Serialization Handler Switching and Upload Progress

1
Comments
5 min read
HPE ArubaOS: Eight Max-Severity Flaws Patched, Including Pre-Auth RCE and PAPI Authentication Bypass

HPE ArubaOS: Eight Max-Severity Flaws Patched, Including Pre-Auth RCE and PAPI Authentication Bypass

1
Comments
9 min read
Pleasanter CVE-2026-113438: Login with a Valid ID and No Password in Specific LDAP Configurations

Pleasanter CVE-2026-113438: Login with a Valid ID and No Password in Specific LDAP Configurations

1
Comments
6 min read
Time4Popcorn CVE-2026-30612: Supply Chain Risk from Abandoned Update Domains to SYSTEM/Root Code Execution

Time4Popcorn CVE-2026-30612: Supply Chain Risk from Abandoned Update Domains to SYSTEM/Root Code Execution

1
Comments
6 min read
ISC BIND: Memory Corruption and Potential RCE via GSS-TSIG Replay, Plus Three Remote DoS Vulnerabilities

ISC BIND: Memory Corruption and Potential RCE via GSS-TSIG Replay, Plus Three Remote DoS Vulnerabilities

1
Comments
8 min read
Cisco Expressway CVE-2026-76466: Pre-Auth Root RCE via Persistent Cookies and Missing Client-Certificate Validation

Cisco Expressway CVE-2026-76466: Pre-Auth Root RCE via Persistent Cookies and Missing Client-Certificate Validation

1
Comments
6 min read
Signal RingRTC CVE-2026-113380: Queue Saturation Can Keep Audio and Possibly Video Active After Hang-Up

Signal RingRTC CVE-2026-113380: Queue Saturation Can Keep Audio and Possibly Video Active After Hang-Up

1
Comments
7 min read
Hackers use artificial intelligence in new system of attacks and extortion

Hackers use artificial intelligence in new system of attacks and extortion

Comments
2 min read
Legitimate Service Abuse: Over 25 Platforms Repurposed for Fraud and Phishing Delivery

Legitimate Service Abuse: Over 25 Platforms Repurposed for Fraud and Phishing Delivery

1
Comments
5 min read
AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

1
Comments
7 min read
Amazon ClickFix: Deploying NetSupport, Lumma, and More Using finger.exe and .plan Files

Amazon ClickFix: Deploying NetSupport, Lumma, and More Using finger.exe and .plan Files

1
Comments
5 min read
Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

1
Comments
6 min read
Four Agentic AI Attack Campaigns: Delegating Healthcare, Government, and SaaS Breaches to Agents

Four Agentic AI Attack Campaigns: Delegating Healthcare, Government, and SaaS Breaches to Agents

1
Comments
6 min read
Operation FlashHole: Initial In-Memory Execution via CrossWeb EX and Post-Quantum Payload Protection

Operation FlashHole: Initial In-Memory Execution via CrossWeb EX and Post-Quantum Payload Protection

1
Comments
6 min read
Context Bombs: Misleading Offensive AI Agents into Decoys to Lower Success Rates and Economic Efficiency

Context Bombs: Misleading Offensive AI Agents into Decoys to Lower Success Rates and Economic Efficiency

1
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.