DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
PoisonedRefresh: A Linux Rootkit Injecting an In-Memory Web Shell into BIG-IP APM

PoisonedRefresh: A Linux Rootkit Injecting an In-Memory Web Shell into BIG-IP APM

Comments
6 min read
Agentic AI Credential Harvesting: An Attack Built in Under Six Hours and the Separate Recon Case

Agentic AI Credential Harvesting: An Attack Built in Under Six Hours and the Separate Recon Case

1
Comments
6 min read
ClearFake WebDAV Attacks: From BNB Smart Chain to Amatera, Reverse Proxies, and NetSupport

ClearFake WebDAV Attacks: From BNB Smart Chain to Amatera, Reverse Proxies, and NetSupport

1
Comments
6 min read
Browser-Based ClickFix: Google Sheets C2 and Tampermonkey Manipulate Cryptocurrency Transactions

Browser-Based ClickFix: Google Sheets C2 and Tampermonkey Manipulate Cryptocurrency Transactions

1
Comments
6 min read
OVERPASS CVE-2026-44756: Pre-Authentication SAP Kernel RCE Across Multiple Protocols

OVERPASS CVE-2026-44756: Pre-Authentication SAP Kernel RCE Across Multiple Protocols

1
Comments
5 min read
S4GET CVE-2026-58240: Missing Authentication in SAP Message Server Enables Cluster-Wide RCE

S4GET CVE-2026-58240: Missing Authentication in SAP Message Server Enables Cluster-Wide RCE

1
Comments
6 min read
Multi-Hop Phishing Through Legitimate Google Services

Multi-Hop Phishing Through Legitimate Google Services

1
Comments
6 min read
Windows CVE-2026-81963 and CVE-2026-85880: Two Exploited SYSTEM Privilege Escalation Flaws

Windows CVE-2026-81963 and CVE-2026-85880: Two Exploited SYSTEM Privilege Escalation Flaws

1
Comments
5 min read
StyleSmuggler: Unauthenticated RCE via Adobe Commerce Failed Payment Email Rendering

StyleSmuggler: Unauthenticated RCE via Adobe Commerce Failed Payment Email Rendering

1
Comments
8 min read
MikroTrick: Active Exploitation of MikroTik RouterOS SSH Authentication Bypass and Privilege Escalation

MikroTrick: Active Exploitation of MikroTik RouterOS SSH Authentication Bypass and Privilege Escalation

1
Comments
6 min read
ted and curlRAT: North Korean Linux Surveillance Toolkit Hiding Inside HAProxy

ted and curlRAT: North Korean Linux Surveillance Toolkit Hiding Inside HAProxy

1
Comments
6 min read
BigBear 2.0: Microsoft 365 AiTM Phishing and Session Theft

BigBear 2.0: Microsoft 365 AiTM Phishing and Session Theft

1
Comments
6 min read
Automated Reinfection and Worm-Like Lateral Movement via Modified ScreenConnect Clients

Automated Reinfection and Worm-Like Lateral Movement via Modified ScreenConnect Clients

1
Comments
7 min read
N-able N-central CVE-2026-86218: Emergency Hotfix for Unauthenticated RCE Zero-Day

N-able N-central CVE-2026-86218: Emergency Hotfix for Unauthenticated RCE Zero-Day

1
Comments
7 min read
Over 5,400 Hacked Sites Serve ClickFix and WebRTC Paths

Over 5,400 Hacked Sites Serve ClickFix and WebRTC Paths

Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.