DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
AI Coding Agent Hijacking via Downloads Folder Instruction Files: Blocked Attempt and Lab Reproductions

AI Coding Agent Hijacking via Downloads Folder Instruction Files: Blocked Attempt and Lab Reproductions

Comments
12 min read
BlackX: APT41-Associated UEFI Bootkit Bypassing Secure Boot via Baton Drop

BlackX: APT41-Associated UEFI Bootkit Bypassing Secure Boot via Baton Drop

1
Comments
10 min read
PHP CVE-2026-115560: Unpatched RCE Risk from Serialization Handler Switching and Upload Progress

PHP CVE-2026-115560: Unpatched RCE Risk from Serialization Handler Switching and Upload Progress

1
Comments
5 min read
HPE ArubaOS: Eight Max-Severity Flaws Patched, Including Pre-Auth RCE and PAPI Authentication Bypass

HPE ArubaOS: Eight Max-Severity Flaws Patched, Including Pre-Auth RCE and PAPI Authentication Bypass

1
Comments
9 min read
Time4Popcorn CVE-2026-30612: Supply Chain Risk from Abandoned Update Domains to SYSTEM/Root Code Execution

Time4Popcorn CVE-2026-30612: Supply Chain Risk from Abandoned Update Domains to SYSTEM/Root Code Execution

1
Comments
6 min read
Pleasanter CVE-2026-113438: Login with a Valid ID and No Password in Specific LDAP Configurations

Pleasanter CVE-2026-113438: Login with a Valid ID and No Password in Specific LDAP Configurations

1
Comments
6 min read
ISC BIND: Memory Corruption and Potential RCE via GSS-TSIG Replay, Plus Three Remote DoS Vulnerabilities

ISC BIND: Memory Corruption and Potential RCE via GSS-TSIG Replay, Plus Three Remote DoS Vulnerabilities

1
Comments
8 min read
Cisco Expressway CVE-2026-76466: Pre-Auth Root RCE via Persistent Cookies and Missing Client-Certificate Validation

Cisco Expressway CVE-2026-76466: Pre-Auth Root RCE via Persistent Cookies and Missing Client-Certificate Validation

1
Comments
6 min read
Signal RingRTC CVE-2026-113380: Queue Saturation Can Keep Audio and Possibly Video Active After Hang-Up

Signal RingRTC CVE-2026-113380: Queue Saturation Can Keep Audio and Possibly Video Active After Hang-Up

1
Comments
7 min read
Hackers use artificial intelligence in new system of attacks and extortion

Hackers use artificial intelligence in new system of attacks and extortion

Comments
2 min read
AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

1
Comments
7 min read
Context Bombs: Misleading Offensive AI Agents into Decoys to Lower Success Rates and Economic Efficiency

Context Bombs: Misleading Offensive AI Agents into Decoys to Lower Success Rates and Economic Efficiency

1
Comments
6 min read
Legitimate Service Abuse: Over 25 Platforms Repurposed for Fraud and Phishing Delivery

Legitimate Service Abuse: Over 25 Platforms Repurposed for Fraud and Phishing Delivery

1
Comments
5 min read
Operation FlashHole: Initial In-Memory Execution via CrossWeb EX and Post-Quantum Payload Protection

Operation FlashHole: Initial In-Memory Execution via CrossWeb EX and Post-Quantum Payload Protection

1
Comments
6 min read
Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

1
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.