DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
WorkOS Sales App Breach: ARTEX-Linked Reconnaissance and Exploit Attempts, CRM and Customer Conversation Data Access

WorkOS Sales App Breach: ARTEX-Linked Reconnaissance and Exploit Attempts, CRM and Customer Conversation Data Access

Comments
7 min read
3AM Ransomware: Signs of AI Assistance, AD Trust Changes, and Around 37 Systems Encrypted

3AM Ransomware: Signs of AI Assistance, AD Trust Changes, and Around 37 Systems Encrypted

Comments
9 min read
Gorbag: WinRAR CVE-2025-8088 and BeautyStealer Used to Quickly Harvest Ukrainian Government and Defense Intelligence

Gorbag: WinRAR CVE-2025-8088 and BeautyStealer Used to Quickly Harvest Ukrainian Government and Defense Intelligence

Comments
9 min read
Node-RED CVE-2026-58115: Single-POST Attempts to Deploy Linux Payloads and Webshells

Node-RED CVE-2026-58115: Single-POST Attempts to Deploy Linux Payloads and Webshells

Comments
8 min read
cPGuard Supply Chain Compromise: Legitimate Auto-Update Distributes Backdoor and Root Credential Harvesting Script

cPGuard Supply Chain Compromise: Legitimate Auto-Update Distributes Backdoor and Root Credential Harvesting Script

Comments
9 min read
Barracuda CVE-2026-116606 and CVE-2026-111560: ESG Authorization Bypass and Multi-Product Command Injection

Barracuda CVE-2026-116606 and CVE-2026-111560: ESG Authorization Bypass and Multi-Product Command Injection

Comments
7 min read
3AM Affiliate AI-Loop Automation: Ransom Operations Evolution

3AM Affiliate AI-Loop Automation: Ransom Operations Evolution

Comments
6 min read
Weekly Threat Recap: Social Engineering to Supply Chain Poisoning

Weekly Threat Recap: Social Engineering to Supply Chain Poisoning

Comments
6 min read
XCPE: Firmware-Embedded Backdoor Turns Over 1.3 Million Devices into Proxy and Ad Fraud Botnets

XCPE: Firmware-Embedded Backdoor Turns Over 1.3 Million Devices into Proxy and Ad Fraud Botnets

1
Comments
7 min read
Synology C3RB3R: NAS Devices Encrypted via Exploitation of Known Vulnerabilities in Outdated DSM

Synology C3RB3R: NAS Devices Encrypted via Exploitation of Known Vulnerabilities in Outdated DSM

1
Comments
6 min read
LLMJacking: Stolen Credentials Fuel LLM Access Resale and $1M in Cumulative Charges

LLMJacking: Stolen Credentials Fuel LLM Access Resale and $1M in Cumulative Charges

1
Comments
9 min read
VOLTA: Infostealer Uses LLMs to Assess Stolen Data and Prioritize High-Value Victims

VOLTA: Infostealer Uses LLMs to Assess Stolen Data and Prioritize High-Value Victims

1
Comments
7 min read
Northflank Breach: Suspected Environment Variable Leak and Unauthorized Use of Customer AI API Keys

Northflank Breach: Suspected Environment Variable Leak and Unauthorized Use of Customer AI API Keys

1
Comments
6 min read
October 2026 Security Review: Compromised "Legitimate Privileges" and the Boundaries of Distribution and AI Execution

October 2026 Security Review: Compromised "Legitimate Privileges" and the Boundaries of Distribution and AI Execution

1
Comments 2
9 min read
Drupal Commerce Core CVE-2026-118539: Active Exploitation of Unauthenticated Access Bypass

Drupal Commerce Core CVE-2026-118539: Active Exploitation of Unauthenticated Access Bypass

1
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.