Anoymask - DEV Community

Anoymask

Nov 4

WorkOS Sales App Breach: ARTEX-Linked Reconnaissance and Exploit Attempts, CRM and Customer Conversation Data Access

#security #threatintel

7 min read

Anoymask

Nov 4

Node-RED CVE-2026-58115: Single-POST Attempts to Deploy Linux Payloads and Webshells

#security #threatintel

8 min read

Anoymask

Nov 4

cPGuard Supply Chain Compromise: Legitimate Auto-Update Distributes Backdoor and Root Credential Harvesting Script

#security #threatintel

9 min read

Anoymask

Nov 4

Gorbag: WinRAR CVE-2025-8088 and BeautyStealer Used to Quickly Harvest Ukrainian Government and Defense Intelligence

#security #threatintel

9 min read

Anoymask

Nov 4

3AM Ransomware: Signs of AI Assistance, AD Trust Changes, and Around 37 Systems Encrypted

#security #threatintel

9 min read

Anoymask

Nov 4

Barracuda CVE-2026-116606 and CVE-2026-111560: ESG Authorization Bypass and Multi-Product Command Injection

#security #threatintel

7 min read

Anoymask

Nov 3

XCPE: Firmware-Embedded Backdoor Turns Over 1.3 Million Devices into Proxy and Ad Fraud Botnets

#security #threatintel

1

7 min read

Anoymask

Nov 3

LLMJacking: Stolen Credentials Fuel LLM Access Resale and $1M in Cumulative Charges

#security #threatintel

1

9 min read

Anoymask

Nov 3

Synology C3RB3R: NAS Devices Encrypted via Exploitation of Known Vulnerabilities in Outdated DSM

#security #threatintel

1

6 min read

Anoymask

Nov 2

October 2026 Security Review: Compromised "Legitimate Privileges" and the Boundaries of Distribution and AI Execution

#security #threatintel

1

2

9 min read

Anoymask

Nov 1

Binance $6.34B Theft: Fake Interviews, Internal AI Tool Abuse, and Wallet Signing Service Compromise

#security #threatintel

1

12 min read

Anoymask

Nov 1

VOLTA: Infostealer Uses LLMs to Assess Stolen Data and Prioritize High-Value Victims

#security #threatintel

1

7 min read

Anoymask

Nov 1

Northflank Breach: Suspected Environment Variable Leak and Unauthorized Use of Customer AI API Keys

#security #threatintel

1

6 min read

Anoymask

Nov 1

Android SMS of Death: Zero-Click Telephony DoS via Malformed WAP Push SMS

#security #threatintel

3

2

6 min read

Anoymask

Oct 30

WordPress Core Update Race: Potential Unauthenticated RCE During Full-Package Updates

#security #threatintel

1

4 min read

Anoymask

Oct 30

TeamViewer CVE-2026-111585 and Related Flaws: Viewer RCE Risks and macOS Local Privilege Escalation

#security #threatintel

1

5 min read

Anoymask

Oct 30

Polymarket Supply Chain Attack: Tampered Monitoring Script Abuses Active Sessions to Move Funds

#security #threatintel

1

7 min read

Anoymask

Oct 30

NetamLoader: XAML and AppDomainManager Loader Targeting Custom Government Windows Builds

#security #threatintel

1

5 min read

Anoymask

Oct 30

Drupal Commerce Core CVE-2026-118539: Active Exploitation of Unauthenticated Access Bypass

#security #threatintel

1

4 min read

Anoymask

Oct 30

Cursor Marketplace Compromise: Malicious Claude Code Extensions Attempt SSH Backdoor Installation

#security #threatintel

1

5 min read

Anoymask

Oct 30

Apache Struts JVN#82782759: @JsonAnySetter Authorization Bypass and Required Protection Settings

#security #threatintel

8 min read

Anoymask

Oct 30

NIK C2: Windows RAT with OpenAI API Abuse, RDP Session Hijacking, and Screen Locking

#security #threatintel

1

5 min read

Anoymask

Oct 30

KeyDrift: UAT-11473's Cisco SD-WAN Implants and IPsec Key-Extraction Capabilities

#security #threatintel

1

6 min read

Anoymask

Oct 30

Talos IR Q3 2026: Vishing, Remote Support Abuse, and BYOVD in Ransomware Incidents

#security #threatintel

1

5 min read

Anoymask

Oct 30

Project Quarry: Open-Source DSL to Detect Multi-Step AI Agent Attacks Using Finite-State Automata

#security #threatintel

1

3 min read

Anoymask

Oct 30

Cisco ASA/FTD CVE-2026-76418: Actively Exploited SSL VPN DoS with Secondary Authentication

#security #threatintel

1

5 min read

Anoymask

Oct 29

Silent Train: Volt Typhoon's Relay Chains and Disposable SSH Infrastructure

#security #threatintel

2

7 min read

Anoymask

Oct 29

GoAhead TLS Flaws: Revoked Certificate Acceptance, Chain-Depth Bypass, and Weak DHE

#security #threatintel

1

7 min read

Anoymask

Oct 29

Legal Industry Threat Landscape: IT Impersonation, ESXi Logging Evasion, and IIS Key Abuse

#security #threatintel

1

8 min read

Anoymask

Oct 29

Guardrail-Based Vulnerability Discovery: Using AI Refusals to Locate Vulnerability Candidates

#security #threatintel

2

5 min read

Anoymask

Oct 29

AI Bot Impersonation: Attackers Disguise Credential Scans as AI Bot Traffic

#security #threatintel

1

6 min read

Anoymask

Oct 29

EPICS Base 7.0.10 and Earlier: Four Pre-Authentication Memory Corruption and DoS Vulnerabilities

#security #threatintel

1

7 min read

Anoymask

Oct 28

Tailworm: Multiple Vulnerabilities in Tailscale SSH Forwarding Leading to Root Privilege Escalation

#security #threatintel

1

7 min read

Anoymask

Oct 28

Convertr Supply Chain Attack: Magecart Skimmer Injected into Plausible Tracker to Steal Payment Data

#security #threatintel

1

6 min read

Anoymask

Oct 28

Aokigahara: Windows Infostealer Targeting Codex, ChatGPT, Claude, and Cloud Credentials

#security #threatintel

1

7 min read

Anoymask

Oct 27

Gheist: Stolen GitHub Tokens Used to Inject Secret-Stealing Actions Workflows

#security #threatintel

1

10 min read

Anoymask

Oct 27

Brotli CVE-2026-111497: Memory Corruption, Information Disclosure, and RCE via Crafted Compressed Streams

#security #threatintel

1

8 min read

Anoymask

Oct 26

AI Coding Agent Hijacking via Downloads Folder Instruction Files: Blocked Attempt and Lab Reproductions

#security #threatintel

1

12 min read

Anoymask

Oct 25

BlackX: APT41-Associated UEFI Bootkit Bypassing Secure Boot via Baton Drop

#security #threatintel

1

10 min read

Anoymask

Oct 24

PHP CVE-2026-115560: Unpatched RCE Risk from Serialization Handler Switching and Upload Progress

#security #threatintel

1

5 min read

Anoymask

Oct 24

Pleasanter CVE-2026-113438: Login with a Valid ID and No Password in Specific LDAP Configurations

#security #threatintel

1

6 min read

Anoymask

Oct 24

Time4Popcorn CVE-2026-30612: Supply Chain Risk from Abandoned Update Domains to SYSTEM/Root Code Execution

#security #threatintel

1

6 min read

Anoymask

Oct 24

HPE ArubaOS: Eight Max-Severity Flaws Patched, Including Pre-Auth RCE and PAPI Authentication Bypass

#security #threatintel

1

9 min read

Anoymask

Oct 23

Signal RingRTC CVE-2026-113380: Queue Saturation Can Keep Audio and Possibly Video Active After Hang-Up

#security #threatintel

1

7 min read

Anoymask

Oct 23

Cisco Expressway CVE-2026-76466: Pre-Auth Root RCE via Persistent Cookies and Missing Client-Certificate Validation

#security #threatintel

1

6 min read

Anoymask

Oct 23

ISC BIND: Memory Corruption and Potential RCE via GSS-TSIG Replay, Plus Three Remote DoS Vulnerabilities

#security #threatintel

1

8 min read

Anoymask

Oct 23

LiteLLM 1.107.0 Supply Chain Compromise: Python Startup Hooks Steal Cloud and AI Credentials

#security #threatintel

3

7

9 min read

Anoymask

Oct 23

GitLab CVE-2026-110264: Pre-Authentication RCE via Integer Overflow in Regular Expression Compiler

#security #threatintel

1

7 min read

Anoymask

Oct 23

Arista VeloCloud On-Prem CVE-2026-114625: Actively Exploited SQL Injection Enables Operator Privilege Escalation

#security #threatintel

1

7 min read

Anoymask

Oct 22

AI-Assisted Multi-Vector Cybercrime: From WordPress Brute Force to VoIP Fraud Planning and C2 Creation

#security #threatintel

1

7 min read

Anoymask

Oct 22

Context Bombs: Misleading Offensive AI Agents into Decoys to Lower Success Rates and Economic Efficiency

#security #threatintel

1

6 min read

Anoymask

Oct 22

PHP2Shell: Pre-Authentication RCE and Firewall Root Compromises Reported by Dream

#security #threatintel

2

16 min read

Anoymask

Oct 22

Operation FlashHole: Initial In-Memory Execution via CrossWeb EX and Post-Quantum Payload Protection

#security #threatintel

1

6 min read

Anoymask

Oct 22

Amazon ClickFix: Deploying NetSupport, Lumma, and More Using finger.exe and .plan Files

#security #threatintel

1

5 min read

Anoymask

Oct 22

Qwen3-Coder Study: Persona Gaps Were Not Significant in Three Main Comparisons After Weight Editing

#security #threatintel

1

6 min read

Anoymask

Oct 22

Four Agentic AI Attack Campaigns: Delegating Healthcare, Government, and SaaS Breaches to Agents

#security #threatintel

1

6 min read

Anoymask

Oct 22

Legitimate Service Abuse: Over 25 Platforms Repurposed for Fraud and Phishing Delivery

#security #threatintel

1

5 min read

Anoymask

Oct 21

Urgent Patch Alert: PHP2Shell, GitLab RCE, and Node.js Brotli RCE

#security #gitlab #node #php

3

7 min read

Anoymask

Oct 21

Cairn Operations Against Asian Governments and Enterprises: Human and AI Roles Across 66 Project Records

#security #threatintel

2

9 min read

Anoymask

Oct 21

Exposed Cairn Panels: Over 20 Dashboards and 1,100+ Projects in the Largest Observed Cluster

#security #threatintel

2

9 min read

4 Week Community Wellness Streak

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Want to connect with Anoymask?