DEV Community

Mark0 profile picture

Mark0

404 bio not found

Joined Joined on 
7th September – Threat Intelligence Report

7th September – Threat Intelligence Report

Comments
1 min read
Magento StyleSmuggler zero-day exploited to deploy Linux backdoor

Magento StyleSmuggler zero-day exploited to deploy Linux backdoor

Comments
1 min read
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

Comments
1 min read
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Comments
1 min read
2026-08-31: Files for an ISC diary (Guildma/Astaroth infection)

2026-08-31: Files for an ISC diary (Guildma/Astaroth infection)

Comments
1 min read
2026-09-01: Essential macOS Stealer infection

2026-09-01: Essential macOS Stealer infection

Comments
1 min read
Angry Birds: Toy Ghouls’ new toys

Angry Birds: Toy Ghouls’ new toys

Comments
1 min read
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Comments
1 min read
OpenAI admits it didn't disclose rogue AI wiki hijacking incident

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

Comments
1 min read
AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

Comments
1 min read
2026-08-31: Files for an ISC diary (Guildma/Astaroth infection)

2026-08-31: Files for an ISC diary (Guildma/Astaroth infection)

Comments
1 min read
2026-09-01: Essential macOS Stealer infection

2026-09-01: Essential macOS Stealer infection

Comments
1 min read
Data access: the hidden cost of security vendor lock-in

Data access: the hidden cost of security vendor lock-in

Comments
1 min read
The story behind the intelligence

The story behind the intelligence

Comments
1 min read
Angry Birds: Toy Ghouls’ new toys

Angry Birds: Toy Ghouls’ new toys

Comments
1 min read
Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

Comments
1 min read
Flextype v1.0.0-alpha.3 Stored Expression Injection Enables PHP Remote Code Execution

Flextype v1.0.0-alpha.3 Stored Expression Injection Enables PHP Remote Code Execution

Comments
1 min read
HPE patches critical ArubaOS-CX remote code execution flaw

HPE patches critical ArubaOS-CX remote code execution flaw

Comments
1 min read
OpenAI admits it didn't disclose rogue AI wiki hijacking incident

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

Comments
1 min read
AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

Comments
1 min read
waf-fu, or Some Log Replay Nonsense

waf-fu, or Some Log Replay Nonsense

Comments
1 min read
Overview of Content Published in August

Overview of Content Published in August

Comments
1 min read
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks

CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks

Comments
1 min read
[webapps] Ghost_CMS 6.19.0 - Remote Code Execution

[webapps] Ghost_CMS 6.19.0 - Remote Code Execution

Comments
1 min read
This month in security with Tony Anscombe – August 2026 edition

This month in security with Tony Anscombe – August 2026 edition

Comments
1 min read
Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Comments
1 min read
An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation

An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation

Comments
1 min read
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Comments
1 min read
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

Comments
1 min read
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Comments
1 min read
Red Team AI Skills

Red Team AI Skills

Comments
1 min read
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another

Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another

Comments
1 min read
Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Comments
1 min read
This month in security with Tony Anscombe – August 2026 edition

This month in security with Tony Anscombe – August 2026 edition

Comments
1 min read
Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Comments
1 min read
Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Comments
1 min read
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks

Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks

Comments
1 min read
Critical Langflow flaw exploited to steal OpenAI and AWS keys

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Comments
1 min read
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Comments
1 min read
Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Comments
1 min read
31th August – Threat Intelligence Report

31th August – Threat Intelligence Report

Comments
1 min read
ValleyRAT masquerading as adware

ValleyRAT masquerading as adware

Comments
1 min read
Agents of Chaos: A New $100K Agentic Security Challenge

Agents of Chaos: A New $100K Agentic Security Challenge

Comments
1 min read
[webapps] CubeCart 6.7.4 - SQL injection

[webapps] CubeCart 6.7.4 - SQL injection

Comments
1 min read
Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Comments
1 min read
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Comments
1 min read
China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

Comments
1 min read
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode

Comments
1 min read
Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

Comments
1 min read
When it Snows it Pours – Anatomy of a ServiceNow Red Team

When it Snows it Pours – Anatomy of a ServiceNow Red Team

Comments
1 min read
The Good, the Bad and the Ugly in Cybersecurity – Week 35

The Good, the Bad and the Ugly in Cybersecurity – Week 35

Comments
1 min read
Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety

Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety

Comments
1 min read
Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)

Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)

Comments
1 min read
ServiceNow warns of three max severity security vulnerabilities

ServiceNow warns of three max severity security vulnerabilities

Comments
1 min read
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Comments
1 min read
Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

Comments
1 min read
“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend

“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend

Comments
1 min read
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Comments
1 min read
ServiceNow warns of three max severity security vulnerabilities

ServiceNow warns of three max severity security vulnerabilities

Comments
1 min read
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Comments
1 min read
loading...