DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CISA Adds Seven Known Exploited Vulnerabilities to Catalog: AI Infrastructure, Python Web Frameworks, SonicWall, VoIP, and Artifactory

CISA Adds Seven Known Exploited Vulnerabilities to Catalog: AI Infrastructure, Python Web Frameworks, SonicWall, VoIP, and Artifactory

Comments
7 min read
All-in-One WP Migration CVE-2026-19949: From Second-Order SQL Injection on Restore to Site Takeover

All-in-One WP Migration CVE-2026-19949: From Second-Order SQL Injection on Restore to Site Takeover

Comments
6 min read
METR AI Infrastructure Compromise: Fail-Open Authentication Leads to API Key Theft, SSH Persistence, and $600K in Unauthorized Usage

METR AI Infrastructure Compromise: Fail-Open Authentication Leads to API Key Theft, SSH Persistence, and $600K in Unauthorized Usage

1
Comments 1
6 min read
AI Experiment: Porting a PLC Exploit Takes Hours and Hundreds of Dollars

AI Experiment: Porting a PLC Exploit Takes Hours and Hundreds of Dollars

1
Comments
5 min read
Exploitation of JFrog Artifactory CVE-2026-82329: Unauthenticated Administrator Token Generation

Exploitation of JFrog Artifactory CVE-2026-82329: Unauthenticated Administrator Token Generation

1
Comments
5 min read
Exploitation of Langflow CVE-2026-0768: From Unauthenticated Root RCE to Secret Theft and Lateral Movement

Exploitation of Langflow CVE-2026-0768: From Unauthenticated Root RCE to Secret Theft and Lateral Movement

1
Comments
5 min read
Spring Ring: From Microsoft Teams Voice Phishing to RMM, RAT, and NTLM Relay

Spring Ring: From Microsoft Teams Voice Phishing to RMM, RAT, and NTLM Relay

Comments 1
6 min read
Unauthenticated RCE, Privilege Escalation, and SQL Injection in ServiceNow AI Platform: Three CVSS 10.0 Vulnerabilities

Unauthenticated RCE, Privilege Escalation, and SQL Injection in ServiceNow AI Platform: Three CVSS 10.0 Vulnerabilities

Comments 1
5 min read
TerminalFix: Fake CAPTCHA to PNG Steganography and WebSocket Reverse Tunnels

TerminalFix: Fake CAPTCHA to PNG Steganography and WebSocket Reverse Tunnels

Comments
6 min read
Fire Ant: Cisco IOS XR, TACACS, and Linux Management Infrastructure Hijacked into Spying and Access Platforms

Fire Ant: Cisco IOS XR, TACACS, and Linux Management Infrastructure Hijacked into Spying and Access Platforms

Comments
6 min read
August 2026 Security Review: Management Planes, Identity, Supply Chain, AI, and OT

August 2026 Security Review: Management Planes, Identity, Supply Chain, AI, and OT

Comments
8 min read
Superior: Crypto and Credential Theft via Browser Extension Acquisition and Malicious Updates

Superior: Crypto and Credential Theft via Browser Extension Acquisition and Malicious Updates

Comments
8 min read
Zabbix agent CVE-2026-59781: Privilege Escalation via DLL Loading During Installation

Zabbix agent CVE-2026-59781: Privilege Escalation via DLL Loading During Installation

Comments
4 min read
PaperCut Authentication Bypass and Dynamic Class Loading: Pre-authentication RCE Chain Actively Exploited

PaperCut Authentication Bypass and Dynamic Class Loading: Pre-authentication RCE Chain Actively Exploited

Comments
6 min read
GiveWP CVE-2026-82222: RCE Chain from Unauthenticated Registration to PHP Object Injection

GiveWP CVE-2026-82222: RCE Chain from Unauthenticated Registration to PHP Object Injection

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.