Anoymask

12 min read

Anoymask

Oct 4

DTU Breach: IAM Data Theft May Affect Up to 200,000 People

#security #threatintel

8 min read

Anoymask

Oct 3

CloudSyncD: Fake Zoom Installer Hides a Stolen Password with Zero-Width Unicode and Launches a macOS Backdoor

#security #threatintel

8 min read

Anoymask

Oct 3

GitLab AI Gateway CVE-2026-90970: Authenticated Command Execution via Prompt Template Sandbox Escape

#security #threatintel

6 min read

Anoymask

Oct 3

Dell CSM: Critical Flaws Enable Storage Admin Access and Kubernetes Privilege Escalation

#security #threatintel

8 min read

Anoymask

Oct 3

FortiMail CVE-2026-104286: Path Traversal and NULL Byte Flaw Exploited for Arbitrary File Writes

#security #threatintel

8 min read

Anoymask

Oct 3

SConnect CVE-2026-18397: Heap Spraying Bypasses Signature Verification for Drive-by RCE

#security #threatintel

8 min read

Anoymask

Oct 2

Warlock: Ransomware Deployment from SYSVOL After SharePoint Compromise

#security #threatintel

9 min read

Anoymask

Oct 2

TA419 Targets AI Policy Experts with BitB and Evilginx AiTM Phishing

#security #threatintel

7 min read

Anoymask

Oct 2

Kiteworks EPG CVE-2026-54154: Pre-Auth RCE with Potential Root Escalation

#security #threatintel

7 min read

Anoymask

Oct 1

September 2026 Security Review: Attacks Following Legitimate Features and AI Execution Capabilities

#security #threatintel

6 min read

Anoymask

Oct 1

GTIG: Vulnerability Trends in the AI Era and AI Infrastructure Attack Surfaces

#security #threatintel

5 min read

Anoymask

Oct 1

Cisco Catalyst SD-WAN Manager CVE-2026-76504: URI Encoding Bypasses Authentication for Admin API Access

#security #threatintel

6 min read

Anoymask

Oct 1

Two Zammad Zero-Days: DIVD Reports Session Compromise, Root Access, and Data Theft

#security #threatintel

8 min read

Anoymask

Oct 1

Truffle Security: Over 540,000 Valid Credentials Confirmed in Public GitHub Repositories

#security #threatintel

5 min read

Anoymask

Sep 30

Storm-3068: Account Takeover via SSPR Leads to Kubernetes Credential Theft Through Azure DevOps

#security #threatintel

9 min read

Anoymask

Sep 30

Star Blizzard: RedFlick Uses Scheduled Tasks to Deploy CosmicPulse

#security #threatintel

9 min read

Anoymask

Sep 30

Apple CoreGraphics CVE-2026-86950: Arbitrary Code Execution via Crafted File Processing, with Exploitation Reported

#security #threatintel

8 min read

Anoymask

Sep 29

Supabase Misconfiguration: Readable Tables in 16,326 Databases, Sensitive Data Confirmed in Some Cases

#security #threatintel

9 min read

Anoymask

Sep 29

Storm-3168 (JADEPUFFER): Azure Resources Mass-Deleted in Seven Minutes Using Compromised Service Principals

#security #threatintel

9 min read

Anoymask

Sep 29

Kiteworks Advanced Forms: Precautionary Shutdown Following Critical Vulnerability and Conditional Resumption

#security #threatintel

8 min read

Anoymask

Sep 29

Bitget: $387.5M Stolen via Wallet Backend Compromise and Transaction Data Tampering

#security #threatintel

10 min read

Anoymask

Sep 28

SharePoint CVE-2026-65660: Two-Stage Web Shell Deployment Attempts on Sites Allowing Anonymous Access

#security #threatintel

9 min read

Anoymask

Sep 28

Cloudflare Containers: Vulnerability Allowing Reading of Residual Data from Other Tenants via Reused Blocks

#security #threatintel

7 min read

Anoymask

Sep 28

Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: Pre-Authentication RCE Zero-Days Under Active Exploitation

#security #threatintel

10 min read

Anoymask

Sep 27

Oracle PeopleSoft CVE-2026-35273: WAF Bypassed via URL Normalization Mismatch to Deploy Web Shells and SIDEEYE

#security #threatintel

11 min read

Anoymask

Sep 27

Mini Shai-Hulud Re-Exposure: Re-Enabled GitHub Action Repositories Trigger Malicious Code Execution in CI

#security #threatintel

10 min read

Anoymask

Sep 26

Elementor 4.3.0 and 4.3.1: CSRF Enables Administrator Account Creation via a Flawed REST Route Check

#security #threatintel

5 min read

Anoymask

Sep 26

TDengine CVE-2026-42542: Unauthenticated Integer Underflow Crashes taosd with a Single Packet

#security #threatintel

6 min read

Anoymask

Sep 26

File Change Notification Side Channel: Estimating Keystroke Timing and Browsing Activity on Linux, Android, and Windows

#security #threatintel

7 min read

Anoymask

Sep 26

MemTensor MemOS Supply Chain Attack: sckit Triggered by Python Imports and OpenClaw Runtime Hooks

#security #threatintel

6 min read

Anoymask

Sep 26

SalesBleed: Zero-Click DNS Data Exfiltration from Agentforce Through Indirect Prompt Injection

#security #threatintel

5 min read

Anoymask

Sep 25

Exposed GitLab Incoming Email Tokens Allow Unauthorized Code Modifications and CI Execution

#security #threatintel

8 min read

Anoymask

Sep 25

Roundcube CVE-2026-48842: Active Exploitation Reported for Pre-Authentication SQL Injection in virtuser_query

#security #threatintel

5 min read

Anoymask

Sep 25

SolarWinds Observability Self-Hosted: Two Pre-Authentication RCE Vulnerabilities Fixed with Different Configuration Requirements

#security #threatintel

6 min read

Anoymask

Sep 25

CARBONATO: A Botnet Built Around an AI Agent via Exposed Docker APIs

#security #threatintel

6 min read

Anoymask

Sep 24

Arista VeloCloud Orchestrator CVE-2026-93952: Active Exploitation of Authentication Bypass Zero-Day

#security #threatintel

6 min read

Anoymask

Sep 24

F5 BIG-IP APM CVE-2026-94127: Pre-authentication RCE Zero-Day Targeting OAuth Configurations

#security #threatintel

6 min read

Anoymask

Sep 24

Autonomous AI Agents Breach Online Retailers in Chained Attacks to Steal Payment Card Data

#security #threatintel

8 min read

Anoymask

Sep 24

RemControl: Android Banking Trojan Uses AI-Assisted Overlays and a Local VPN

#security #threatintel

6 min read

Anoymask

Sep 24

WordPress CVE-2026-87902: Probing and PHP File-Write Attempts Observed on Patch Day

#security #threatintel

7 min read

Anoymask

Sep 23

Check Point CVE-2026-93616: Actively Exploited Pre-Authentication Path Traversal Leading to Script Execution

#security #threatintel

9 min read

Anoymask

Sep 23

BigDiskBuster: Public PoC Claims to Block Microsoft Defender Platform and Security Intelligence Updates

#security #threatintel

8 min read

Anoymask

Sep 23

CLOSEDQUORUM: An Autonomous Windows Implant Using Multiple LLMs for Attack Decisions

#security #threatintel

7 min read

Anoymask

Sep 23

D-Link DIR-822A: Pre-authentication DHCP Buffer Overflow and L2TP Out-of-Bounds Write

#security #threatintel

6 min read

Anoymask

Sep 23

Kapibala: Government Data Theft via WordPress and Active Exploitation of Zyxel CVE-2026-7273

#security #threatintel

7 min read

Anoymask

Sep 23

EvilTokens: AI-Powered PhaaS Abusing Device Code Authentication to Compromise Over 12,000 Mailboxes

#security #threatintel

7 min read

Anoymask

Sep 23

LLM Relay Infrastructure: Over 80,000 Nodes Obscure User Attribution and Regional Controls

#security #threatintel

7 min read

Anoymask

Sep 23

TrustSink: Password Theft via a Rogue External MFA Provider in Microsoft Entra ID

#security #threatintel

6 min read

Anoymask

Sep 22

Colorado Small Water Utility OT Breaches: Attackers Alter Settings, Disable Alarms, and Change Pumping Cycles

#security #threatintel

5 min read

Anoymask

Sep 22

BigCommerce Third-Party App Compromise: Malicious Script Injected into Storefronts via Ribon Credentials

#security #threatintel

5 min read

Anoymask

Sep 22

Three Linux Kernel Vulnerabilities Added to CISA KEV: Active Exploitation Reported in AF_ALG, ebtables, and kTLS

#security #threatintel

6 min read

Anoymask

Sep 22

CrowdSec Source Code Leak: GitHub OAuth Token Abused in TanStack Supply Chain Attack

#security #threatintel

7 min read

Anoymask

Sep 22

Click2Shell: One-Click Chain from Automatic WordPress Theme Installation to PHP Execution

#security #threatintel

6 min read

Anoymask

Sep 22

Gemini Accessed Three Real Companies During a Security Evaluation via Password Guessing and Publicly Exposed Credentials

#security #threatintel

6 min read

Anoymask

Sep 21

Overpatch and Heapjack: Two Techniques for Bypassing Codex's Write Restrictions and Escaping Its Read-Only Sandbox

#security #threatintel

9 min read

Anoymask

Sep 21

indexed-btree: npm Supply Chain Malware Executes at Runtime and Uses a Smart Contract on Ethereum Sepolia for C2

#security #threatintel

8 min read

Anoymask

Sep 19

ShinyHunters Hacks Clop Leak Site: Claims an Unauthenticated File Upload Led to Tor Private Key Theft

#security #threatintel

6 min read

Anoymask

Sep 19

Rapuncel: Fake GitHub Repositories Disable EDR with a Signed Kernel Driver

#security #threatintel

5 min read

Anoymask

Sep 19

Reaching an Internal OpenAI Repository Through an HEIF RCE and Overprivileged SSO Token Chain

#security #threatintel