Anoymask

5 min read

Anoymask

Oct 13

Ledger Nano X Supply Chain Attack: LTE/eSIM Hardware Implant Steals Seed Phrases

#security #threatintel

6 min read

Anoymask

Oct 13

GitLab CVE-2026-97229: Unauthenticated RCE via Integer Overflow in CI/CD Regular Expression Compiler

#security #threatintel

5 min read

Anoymask

Oct 13

French Retail OT Breach: Danfoss Refrigeration Controllers Remotely Defrosted, Causing Food Waste; Fires Under Probe

#security #threatintel

6 min read

Anoymask

Oct 13

AvisLoader: A Windows Malware Loader Combining Cloudflare ClickFix and Tox P2P C2

#security #threatintel

6 min read

Anoymask

Oct 13

Claude Evaluation Guardrail Breaches: Real-Server Command Execution, Form Submissions, and Token Workarounds Observed

#security #threatintel

6 min read

Anoymask

Oct 11

Insider Active Directory Sabotage: A Hidden VM Used to Schedule Account Deletions and Password Resets

#security #threatintel

7 min read

Anoymask

Oct 10

Citrix NetScaler CVE-2026-107406: Pre-Authentication RCE and DoS via SAML Configuration

#security #threatintel

6 min read

Anoymask

Oct 10

SonicWall SMA1000 CVE-2026-102255: SSRF Attack Attempts Targeting Internal CouchDB

#security #threatintel

6 min read

Anoymask

Oct 9

IDCF Cloud: Ransomware Disrupts Four Eastern Japan Zones; Customers Advised to Rebuild from Backups

#security #threatintel

4

5 min read

Anoymask

Oct 9

MATCHBOIL: UAC-0099 Targets Ukrainian Organizations with Two-Minute C2 Polling and Sandbox Evasion

#security #threatintel

4

5 min read

Anoymask

Oct 9

Flax Typhoon: MicroScan Scanned Japanese Airports; U.S. Seizes Seven Domains

#security #threatintel

6 min read

Anoymask

Oct 9

Cisco NX-OS: Four Critical Advisories Cover 11 CVEs, Including Root RCE and DoS

#security #threatintel

4

7 min read

Anoymask

Oct 9

Midnight Mimosa: Malware Preinstalled in Android Firmware for Ad Fraud and Residential Proxying

#security #threatintel

6 min read

Anoymask

Oct 9

FakeGit: A 17,610-Repository GitHub Campaign Delivering SmartLoader and StealC

#security #threatintel

6 min read

Anoymask

Oct 8

Microsoft FORGE: Three Lessons for Scaling Frontier AI Vulnerability Research

#security #threatintel

5 min read

Anoymask

Oct 8

PoeLLM: Compromising Public AI Servers for Cryptomining and Further Reconnaissance

#security #threatintel

6 min read

Anoymask

Oct 8

ARTEX: LLM-Integrated Penetration Testing Tool Used to Target South Korean Financial Institutions and Exfiltrate Data

#security #threatintel

6 min read

Anoymask

Oct 7

Fake AI Ads Phishing Uses Browser-in-the-Browser and Human Operators to Capture Credentials and MFA Codes

#security #threatintel

5

7 min read

Anoymask

Oct 7

Nikkei Reports Google Workspace Unauthorized Access and About 9,000 Phishing Emails via Microsoft 365

#security #threatintel

8 min read

Anoymask

Oct 7

Atlassian CVE-2026-21589: Unauthenticated Access to Files in Web Root Across Multiple Data Center Products

#security #threatintel

8 min read

Anoymask

Oct 6

Denmark CPR Breach: Legitimate Company Access Abused to Query Data on About 8.8 Million People

#security #threatintel

6 min read

Anoymask

Oct 6

Partisan Zmiy: Nearly Two Years of Access to a Healthcare Network

#security #threatintel

6 min read

Anoymask

Oct 6

Cling: IoT Backdoor Disguises C2 as STUN Traffic

#security #threatintel

7 min read

Anoymask

Oct 6

Rejetto HFS CVE-2026-61500: Predictable Signing Key Enables Admin Session Forgery and RCE

#security #threatintel

6 min read

Anoymask

Oct 5

Citrix NetScaler CVE-2026-88779: Actively Exploited SAML Memory Overflow Causes DoS

#security #threatintel

8 min read

Anoymask

Oct 4

Fortra BoKS: Predictable AD Passwords, Root Command Injection, and Pre-Authentication Memory Corruption

#security #threatintel

12 min read

Anoymask

Oct 4

DTU Breach: IAM Data Theft May Affect Up to 200,000 People

#security #threatintel

8 min read

Anoymask

Oct 3

CloudSyncD: Fake Zoom Installer Hides a Stolen Password with Zero-Width Unicode and Launches a macOS Backdoor

#security #threatintel

8 min read

Anoymask

Oct 3

GitLab AI Gateway CVE-2026-90970: Authenticated Command Execution via Prompt Template Sandbox Escape

#security #threatintel

6 min read

Anoymask

Oct 3

Dell CSM: Critical Flaws Enable Storage Admin Access and Kubernetes Privilege Escalation

#security #threatintel

8 min read

Anoymask

Oct 3

FortiMail CVE-2026-104286: Path Traversal and NULL Byte Flaw Exploited for Arbitrary File Writes

#security #threatintel

8 min read

Anoymask

Oct 3

SConnect CVE-2026-18397: Heap Spraying Bypasses Signature Verification for Drive-by RCE

#security #threatintel

8 min read

Anoymask

Oct 2

Warlock: Ransomware Deployment from SYSVOL After SharePoint Compromise

#security #threatintel

9 min read

Anoymask

Oct 2

TA419 Targets AI Policy Experts with BitB and Evilginx AiTM Phishing

#security #threatintel

7 min read

Anoymask

Oct 2

Kiteworks EPG CVE-2026-54154: Pre-Auth RCE with Potential Root Escalation

#security #threatintel

7 min read

Anoymask

Oct 1

September 2026 Security Review: Attacks Following Legitimate Features and AI Execution Capabilities

#security #threatintel

6 min read

Anoymask

Oct 1

GTIG: Vulnerability Trends in the AI Era and AI Infrastructure Attack Surfaces

#security #threatintel

5 min read

Anoymask

Oct 1

Cisco Catalyst SD-WAN Manager CVE-2026-76504: URI Encoding Bypasses Authentication for Admin API Access

#security #threatintel

6 min read

Anoymask

Oct 1

Two Zammad Zero-Days: DIVD Reports Session Compromise, Root Access, and Data Theft

#security #threatintel

8 min read

Anoymask

Oct 1

Truffle Security: Over 540,000 Valid Credentials Confirmed in Public GitHub Repositories

#security #threatintel

5 min read

Anoymask

Sep 30

Storm-3068: Account Takeover via SSPR Leads to Kubernetes Credential Theft Through Azure DevOps

#security #threatintel

9 min read

Anoymask

Sep 30

Star Blizzard: RedFlick Uses Scheduled Tasks to Deploy CosmicPulse

#security #threatintel

9 min read

Anoymask

Sep 30

Apple CoreGraphics CVE-2026-86950: Arbitrary Code Execution via Crafted File Processing, with Exploitation Reported

#security #threatintel

8 min read

Anoymask

Sep 29

Supabase Misconfiguration: Readable Tables in 16,326 Databases, Sensitive Data Confirmed in Some Cases

#security #threatintel

9 min read

Anoymask

Sep 29

Storm-3168 (JADEPUFFER): Azure Resources Mass-Deleted in Seven Minutes Using Compromised Service Principals

#security #threatintel

9 min read

Anoymask

Sep 29

Kiteworks Advanced Forms: Precautionary Shutdown Following Critical Vulnerability and Conditional Resumption

#security #threatintel

8 min read

Anoymask

Sep 29

Bitget: $387.5M Stolen via Wallet Backend Compromise and Transaction Data Tampering

#security #threatintel

10 min read

Anoymask

Sep 28

SharePoint CVE-2026-65660: Two-Stage Web Shell Deployment Attempts on Sites Allowing Anonymous Access

#security #threatintel

9 min read

Anoymask

Sep 28

Cloudflare Containers: Vulnerability Allowing Reading of Residual Data from Other Tenants via Reused Blocks

#security #threatintel

7 min read

Anoymask

Sep 28

Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: Pre-Authentication RCE Zero-Days Under Active Exploitation

#security #threatintel

10 min read

Anoymask

Sep 27

Oracle PeopleSoft CVE-2026-35273: WAF Bypassed via URL Normalization Mismatch to Deploy Web Shells and SIDEEYE

#security #threatintel

11 min read

Anoymask

Sep 27

Mini Shai-Hulud Re-Exposure: Re-Enabled GitHub Action Repositories Trigger Malicious Code Execution in CI

#security #threatintel

10 min read

Anoymask

Sep 26

Elementor 4.3.0 and 4.3.1: CSRF Enables Administrator Account Creation via a Flawed REST Route Check

#security #threatintel

5 min read

Anoymask

Sep 26

TDengine CVE-2026-42542: Unauthenticated Integer Underflow Crashes taosd with a Single Packet

#security #threatintel

6 min read

Anoymask

Sep 26

File Change Notification Side Channel: Estimating Keystroke Timing and Browsing Activity on Linux, Android, and Windows

#security #threatintel

7 min read

Anoymask

Sep 26

MemTensor MemOS Supply Chain Attack: sckit Triggered by Python Imports and OpenClaw Runtime Hooks

#security #threatintel

6 min read

Anoymask

Sep 26

SalesBleed: Zero-Click DNS Data Exfiltration from Agentforce Through Indirect Prompt Injection

#security #threatintel

5 min read

Anoymask

Sep 25

Exposed GitLab Incoming Email Tokens Allow Unauthorized Code Modifications and CI Execution

#security #threatintel

8 min read

Anoymask

Sep 25

Roundcube CVE-2026-48842: Active Exploitation Reported for Pre-Authentication SQL Injection in virtuser_query

#security #threatintel