DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
KindaRails2Shell (CVE-2026-66066): Arbitrary File Read and RCE via Active Storage Uploads

KindaRails2Shell (CVE-2026-66066): Arbitrary File Read and RCE via Active Storage Uploads

Comments
4 min read
STAC4749: Chaos Ransomware in Under 17 Hours via Teams IT Support Scam

STAC4749: Chaos Ransomware in Under 17 Hours via Teams IT Support Scam

Comments
5 min read
TA488 OWAReaper: A "Half-Click" Attack that Adds Persistence Inside OWA Just by Opening an Email

TA488 OWAReaper: A "Half-Click" Attack that Adds Persistence Inside OWA Just by Opening an Email

Comments
5 min read
GTIG: 2026 OSS Supply Chain Compromise, Credential Theft, and Self-Propagation

GTIG: 2026 OSS Supply Chain Compromise, Credential Theft, and Self-Propagation

Comments
5 min read
RufRoot (CVE-2026-59726): Full Compromise of AI Agent Infrastructure via Unauthenticated MCP Bridge

RufRoot (CVE-2026-59726): Full Compromise of AI Agent Infrastructure via Unauthenticated MCP Bridge

Comments
5 min read
ShinyHunters: Breaking Help Desks via Vishing and Bulk Stealing SaaS via SSO

ShinyHunters: Breaking Help Desks via Vishing and Bulk Stealing SaaS via SSO

Comments
6 min read
OpenAI and Hugging Face: Autonomous AI Agent Chains Zero-Day, Credentials, and Cloud Lateral Movement

OpenAI and Hugging Face: Autonomous AI Agent Chains Zero-Day, Credentials, and Cloud Lateral Movement

Comments
7 min read
VMware VMSA-2026-0006: vCenter Authentication Bypass / RCE and ESXi VM Escape

VMware VMSA-2026-0006: vCenter Authentication Bypass / RCE and ESXi VM Escape

Comments
6 min read
Cisco FMC CVE-2026-20316: Active Exploitation Chain from Static Credentials to Management Infrastructure Compromise

Cisco FMC CVE-2026-20316: Active Exploitation Chain from Static Credentials to Management Infrastructure Compromise

Comments
6 min read
Cisco Talos IR Q2 2026: Observed Attack Chains of M365 Token Compromise and RMM-Disguised Ransomware

Cisco Talos IR Q2 2026: Observed Attack Chains of M365 Token Compromise and RMM-Disguised Ransomware

Comments
7 min read
IPMI/BMC Authentication Hash Leak: Stealing Out-of-Band Server Management via Offline Cracking

IPMI/BMC Authentication Hash Leak: Stealing Out-of-Band Server Management via Offline Cracking

Comments
5 min read
Fastjson 1.x CVE-2026-16723: Unauthenticated RCE Targeting Default Spring Boot Fat-Jars

Fastjson 1.x CVE-2026-16723: Unauthenticated RCE Targeting Default Spring Boot Fat-Jars

Comments
6 min read
vBulletin CVE-2026-61511: Unauthenticated RCE via Public AJAX Template to `eval()`

vBulletin CVE-2026-61511: Unauthenticated RCE via Public AJAX Template to `eval()`

Comments
5 min read
ELECOM Wireless LAN Devices JVN#56870912: OS Command Injection in Management Screen and Configuration Restoration

ELECOM Wireless LAN Devices JVN#56870912: OS Command Injection in Management Screen and Configuration Restoration

Comments
5 min read
Dysphoria: A 200k-Device Botnet Using Blockchain Name Resolution and Infected Device Relays

Dysphoria: A 200k-Device Botnet Using Blockchain Name Resolution and Infected Device Relays

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.