DEV Community

#threatintelligence

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
ASHVEIN hides C2 tasking in invisible HTML elements

ASHVEIN hides C2 tasking in invisible HTML elements

Comments
3 min read
Mapping Self-Hosted LLM API Gateways: What the CISA Distillation Advisory Means for Asset Owners

Mapping Self-Hosted LLM API Gateways: What the CISA Distillation Advisory Means for Asset Owners

Comments
2 min read
One shellcode, two names: what Volexity's UTA0560 finding says about attribution confidence

One shellcode, two names: what Volexity's UTA0560 finding says about attribution confidence

Comments
4 min read
Group-IB's August 2026 APAC Ransomware Data: What 190 Incidents Actually Tell You

Group-IB's August 2026 APAC Ransomware Data: What 190 Incidents Actually Tell You

Comments
2 min read
AI Has Tipped the Cyber Battlefield in Attackers' Favor, Microsoft Warns

AI Has Tipped the Cyber Battlefield in Attackers' Favor, Microsoft Warns

Comments
2 min read
Chosen Brick and HEAVYGRAM: Iranian Spyware That Reports Through Telegram

Chosen Brick and HEAVYGRAM: Iranian Spyware That Reports Through Telegram

Comments
2 min read
Transfer Stations in Plain Sight: Enumerating the API Resale Layer Described in the CISA Distillation Advisory

Transfer Stations in Plain Sight: Enumerating the API Resale Layer Described in the CISA Distillation Advisory

Comments
2 min read
Sanitization Leaves Traces: What Exposed AI Gateway Panels Reveal About Their Operators After AA26-251A

Sanitization Leaves Traces: What Exposed AI Gateway Panels Reveal About Their Operators After AA26-251A

Comments
1 min read
The 27-Day Window: What the BlueMoon Campaign Teaches About Commit-to-Release Gaps

The 27-Day Window: What the BlueMoon Campaign Teaches About Commit-to-Release Gaps

Comments
3 min read
MISP Feed Redirects Before 2.5.45: When an Outbound Request Carries Credentials to Another Host

MISP Feed Redirects Before 2.5.45: When an Outbound Request Carries Credentials to Another Host

1
Comments
3 min read
#4 on MalwareBazaar — what that proves, and what it does not

#4 on MalwareBazaar — what that proves, and what it does not

Comments
3 min read
Reading the Anthropic Threat Intelligence Report as a Defenders' Checklist, Not a News Cycle

Reading the Anthropic Threat Intelligence Report as a Defenders' Checklist, Not a News Cycle

Comments 1
3 min read
When a Certificate Becomes a Clue: Infrastructure Linking in the Toll Fraud Investigation

When a Certificate Becomes a Clue: Infrastructure Linking in the Toll Fraud Investigation

1
Comments 1
4 min read
Mapping a whole domain fleet from one reverse IP lookup

Mapping a whole domain fleet from one reverse IP lookup

1
Comments 1
10 min read
What Is OSINT and Why It Matters

What Is OSINT and Why It Matters

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.