Anoymask - DEV Community

Anoymask

Aug 19

Forminator Forms (CVE-2026-15748): Unauthenticated RCE via Forged Upload Settings in Select Fields

#security #threatintel

1

6 min read

Anoymask

Aug 19

Clop's Windchill Web Shell: From Credential Decryption to Design Data Theft Inside the App

#security #threatintel

1

6 min read

Anoymask

Aug 19

Two GitLab GraphQL Vulnerabilities: Unauthenticated Data Tampering and CSRF

#security #threatintel

1

8 min read

Anoymask

Aug 18

F-RevoCRM CVE-2026-71368: Cross-Site Scripting Targeting Logged-in Users

#security #threatintel

1

6 min read

Anoymask

Aug 18

Microsoft's AI Defense Research: Generating Detection Test Logs from Attack Procedures

#security #threatintel

7 min read

Anoymask

Aug 18

CrowdStrike's AI Triage Research: How Well Can AI Automatically Judge SOC Alerts?

#security #threatintel

6 min read

Anoymask

Aug 18

ShieldBreak (CVE-2026-69414): Unpatched Local Vulnerability for Privilege Escalation from Defender to SYSTEM

#security #threatintel

6 min read

Anoymask

Aug 17

Evooo1Bot: A Multi-Functional Linux Botnet That Turns Compromised Gateways into SOCKS5 Relays, SSH Spreaders, and DDoS Tools

#security #threatintel

1

10 min read

Anoymask

Aug 15

macOS Screen Sharing CVE-2026-65400: Authentication Bypass Leads to Root Access and Monero Miner Installation

#security #threatintel

1

5 min read

Anoymask

Aug 15

GeoServer jsonArrayContains SQL Injection: Hundreds of Attempts Observed, RCE Conditions, and the 2023 CVE Gap

#security #threatintel

1

10 min read

Anoymask

Aug 15

AmnesiaStealer: macOS Infostealer that Hijacks In-Browser Sessions via ClickFix

#security #threatintel

1

7 min read

Anoymask

Aug 15

SAP Commerce Cloud CVE-2026-58231: Active Exploit Attempts for Unauthenticated RCE

#security #threatintel

1

5 min read

Anoymask

Aug 14

JWR: A Real-Time PhaaS Using WebSockets to Monitor Victim Input and Remotely Control Screen Transitions

#security #threatintel

1

5 min read

Anoymask

Aug 14

VMware vCenter CVE-2026-59310: Active Exploitation of Unauthenticated RCE for Persistent Reverse SSH

#security #threatintel

1

5 min read

Anoymask

Aug 14

Jewelbug: XG-Web Infrastructure Supporting Government Webmail Compromise and Browser Takeover

#security #threatintel

1

6 min read

Anoymask

Aug 14

Akira: Intrusion Stopping EDR via Safe Mode and Exfiltrating Data Before Encryption

#security #threatintel

1

6 min read

Anoymask

Aug 13

Plug and Pwn: Getting Windows SYSTEM Privileges from Fake USB and RDP Devices

#security #threatintel

1

5 min read

Anoymask

Aug 13

City-Forum: Anonymous Data Enumeration Across Salesforce Aura / LWR and ServiceNow Guest Search

#security #threatintel

1

6 min read

Anoymask

Aug 13

WindRelay + SpyNote: Phone Remote Control and NFC Relay for Loan and Card Fraud

#security #threatintel

6 min read

Anoymask

Aug 13

Lazarus "Operation Dream Job": From Windows Zero-Day to EDR Bypass and Backdoor Deployment

#security #threatintel

6 min read

Anoymask

Aug 12

Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

#security #threatintel

11 min read

Anoymask

Aug 12

Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

#security #threatintel

9 min read

Anoymask

Aug 11

BdThemes API-Driven Supply Chain Compromise: Admin XSS to Web Shell and Hidden Admin

#security #threatintel

8 min read

Anoymask

Aug 11

Ghostjacking: Turning Logs and Alerts into Commands to Take Over AI Agents

#security #threatintel

1

4

8 min read

Anoymask

Aug 11

Disruption of Polish CHP: Wind Farm to OT via Private APN

#security #threatintel

2

8 min read

Anoymask

Aug 9

Head Mare Breaches TrueConf: From SYSTEM Privileges to Trojanized Legitimate Client Updates

#security #threatintel

9 min read

Anoymask

Aug 9

RovoBlast: One-Click Hijacking of Enterprise AI Permissions for Data Exfiltration

#security #threatintel

8 min read

Anoymask

Aug 8

Metabase Unauthenticated SQL Injection: From Admin Privilege Heist to Connected DB Data Theft

#security #threatintel

7 min read

Anoymask

Aug 8

VMware ESX Shell Obfuscation: 21 Techniques Work with BusyBox and Bypass Plaintext Keyword Detection

#security #threatintel

7 min read

Anoymask

Aug 7

UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

#security #threatintel

5 min read

Anoymask

Aug 7

Paperclip CVE-2026-41679: 6 API Calls from Public Registration to AI Agent Host Process RCE

#security #threatintel

5 min read

Anoymask

Aug 7

TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

#security #threatintel

5 min read

Anoymask

Aug 7

TeamCity CVE-2026-63077: Unauthenticated Deserialization RCE in Agent Polling Actively Exploited

#security #threatintel

5 min read

Anoymask

Aug 6

COLDCARD Audit Phishing: 25.7MB Batch File Embeds ScreenConnect and Uses Chat to Trick Admins into Running It

#security #threatintel

2

8

7 min read

Anoymask

Aug 6

Langflow CVE-2026-9198: Active Exploitation RCE via Auto-Login Superuser Token and Code Validator `exec()` Chain

#security #threatintel

7 min read

Anoymask

Aug 6

khunt: SQL Injection to Resident Threat Inside Oracle Database Stealing Credentials with SYSTEM Privileges

#security #threatintel

7 min read

Anoymask

Aug 5

ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

#security #threatintel

8 min read

Anoymask

Aug 5

Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents

#security #threatintel

7 min read

Anoymask

Aug 5

TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditions

#security #threatintel

7 min read

Anoymask

Aug 5

Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,090 Issues

#security #threatintel

7 min read

Anoymask

Aug 5

Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

#security #threatintel

7 min read

Anoymask

Aug 4

VPS.org One-Click Template: Public PostgreSQL Fixed Password and Zulip Session Forgery

#security #threatintel

5 min read

Anoymask

Aug 4

N-central CVE-2026-18577: Lateral Movement from RMM Admin Rights to Customer Endpoints and Persistence via Cloudflare Tunnel

#security #threatintel

6 min read

Anoymask

Aug 4

CC-Link IE TSN CVE-2026-13584: OT Protocol Vulnerability Enabling Control I/O Value Tampering from Adjacent Networks

#security #threatintel

5 min read

Anoymask

Aug 4

DOUBLECUP: ClickFix Loader-as-a-Service Restoring Fileless Payload from PNG in Browser Cache

#security #threatintel

6 min read

Anoymask

Aug 3

COLDCARD Predictable RNG: From Seed Recovery to About $8.86M Bitcoin Theft

#security #threatintel

11 min read

Anoymask

Aug 1

Adform Delivery Script Compromised: Wallet Addresses Replaced on Clipboard and Screen

#security #threatintel

5 min read

Anoymask

Aug 1

Boundary Escape in Claude Evaluation Environment: Real-World Incidents at 3 Organizations and Malicious PyPI Package Publication

#security #threatintel

6 min read

Anoymask

Aug 1

XCSSET v40: From Xcode Supply Chain to Memory-Resident and Browser/Telegram Hijacking

#security #threatintel

6 min read

Anoymask

Aug 1

Water OT Attack Targeting Public PLCs: Locking Out Operators via Password and IP Changes

#security #threatintel

1

7

5 min read

Anoymask

Aug 1

DeepSeek and Hermes: An Autonomous Attack Platform for Reconnaissance, PoC Acquisition, and Target Selection

#security #threatintel

5 min read

Anoymask

Jul 31

STAC4749: Chaos Ransomware in Under 17 Hours via Teams IT Support Scam

#security #threatintel

5 min read

Anoymask

Jul 31

GTIG: 2026 OSS Supply Chain Compromise, Credential Theft, and Self-Propagation

#security #threatintel

5 min read

Anoymask

Jul 31

TA488 OWAReaper: A "Half-Click" Attack that Adds Persistence Inside OWA Just by Opening an Email

#security #threatintel

5 min read

Anoymask

Jul 31

KindaRails2Shell (CVE-2026-66066): Arbitrary File Read and RCE via Active Storage Uploads

#security #threatintel

4 min read

Anoymask

Jul 31

RufRoot (CVE-2026-59726): Full Compromise of AI Agent Infrastructure via Unauthenticated MCP Bridge

#security #threatintel

5 min read

Anoymask

Jul 30

ShinyHunters: Breaking Help Desks via Vishing and Bulk Stealing SaaS via SSO

#security #threatintel

6 min read

Anoymask

Jul 30

Cisco FMC CVE-2026-20316: Active Exploitation Chain from Static Credentials to Management Infrastructure Compromise

#security #threatintel

6 min read

Anoymask

Jul 30

OpenAI and Hugging Face: Autonomous AI Agent Chains Zero-Day, Credentials, and Cloud Lateral Movement

#security #threatintel

7 min read

Anoymask

Jul 30

VMware VMSA-2026-0006: vCenter Authentication Bypass / RCE and ESXi VM Escape

#security #threatintel

6 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with Anoymask?