Anoymask - DEV Community

Anoymask

Aug 29

GiveWP CVE-2026-82222: RCE Chain from Unauthenticated Registration to PHP Object Injection

#security #threatintel

5 min read

Anoymask

Aug 29

PaperCut Authentication Bypass and Dynamic Class Loading: Pre-authentication RCE Chain Actively Exploited

#security #threatintel

5 min read

Anoymask

Aug 29

Zabbix agent CVE-2026-59781: Privilege Escalation via DLL Loading During Installation

#security #threatintel

4 min read

Anoymask

Aug 28

Citrix NetScaler CVE-2026-8452: SAML Heap Overflow to Root RCE and Web Shell Deployment

#security #threatintel

2

7 min read

Anoymask

Aug 28

TA4922 PackClient Attacks: From Tax Documents to DLL Side-Loading and RAT Deployment

#security #threatintel

2

5 min read

Anoymask

Aug 28

SPEAKINGSTONE and DARKLANTERN in ZBT-Based White-Label Routers: WAN-Accessible Root Shell and DNS Hijacking

#security #threatintel

2

5 min read

Anoymask

Aug 28

Safely Analyzing Obfuscated JavaScript: Step-by-Step Phishing Kit Restoration

#security #threatintel

2

5 min read

Anoymask

Aug 28

Nearly 700 Rogue AI Agents Coordinated in the Hugging Face Attack: Lateral Movement from Artifactory Across Multiple Regions

#security #threatintel

2

5 min read

Anoymask

Aug 27

Attacks on Water OT: Over 100 Internet-Exposed Systems Targeted in July

#security #threatintel

5 min read

Anoymask

Aug 27

When AI Infrastructure Becomes the Target: Attacks Observed on LiteLLM, RAGFlow, and Kestra

#security #threatintel

6 min read

Anoymask

Aug 27

NovaCookies: Microsoft 365 AiTM Exploiting Trusted Docusign and Microsoft Redirects

#security #threatintel

6 min read

Anoymask

Aug 27

Gitea CVE-2026-60004: Active Exploitation of RCE via diffpatch API to Install Git Hooks

#security #threatintel

5 min read

Anoymask

Aug 27

SharePoint Authentication Bypass and RCE Chain Attack Observed: CVE-2026-55040 / CVE-2026-63520

#security #threatintel

5 min read

Anoymask

Aug 27

Dark Caracal's New Malware GoCaracal: From SVG Phishing to Ethereum Backup C2

#security #threatintel

6 min read

Anoymask

Aug 26

Unit 42: Real-World Prevalence of 405 AI-Related Malware Samples and Evaluation of Existing Defenses

#security #threatintel

7 min read

Anoymask

Aug 26

Reconstructing JavaScript from HTML Tag Names: An XSS and WAF Blocklist Evasion Technique

#security #threatintel

6 min read

Anoymask

Aug 26

FURUNO FA-50: Hard-coded Credentials and Missing Authentication for Certain Settings (CVE-2026-59769 / CVE-2026-67578)

#security #threatintel

6 min read

Anoymask

Aug 26

CISA "A Tale of Two SOCs": Detection and Containment from Two Red Team Assessments

#security #threatintel

6 min read

Anoymask

Aug 26

Active Exploitation of Oracle HTTP Server / WebLogic Proxy Plug-in CVE-2026-21962

#security #threatintel

1

2

6 min read

Anoymask

Aug 25

Two Vulnerabilities Bypassing Signature Verification in miniOrange SAML SSO

#security #threatintel

1

10 min read

Anoymask

Aug 25

CVE-2026-75501: Calix Router WAN-side UPnP Exposes Internal Devices

#security #threatintel

1

10 min read

Anoymask

Aug 24

ToxicPanda 2.0 Chains VPN, Accessibility, and ADB

#security #threatintel

11 min read

Anoymask

Aug 23

JarService / zhima Malware Entering via Insecure Android Car Head Unit Update Paths

#security #threatintel

1

9 min read

Anoymask

Aug 22

E4del / PINHOLE Using FTP Banners for Command Retrieval

#security #threatintel

5 min read

Anoymask

Aug 22

TrueConf Server Exploitation: PhantomCore Delivered via CVE-2026-72529 / 72530

#security #threatintel

5 min read

Anoymask

Aug 22

Three Russian-Linked Clusters Abuse Legitimate Authentication Flows

#security #threatintel

6 min read

Anoymask

Aug 22

SynkLoader Deploying Multi-Stage Modules via Teams Phishing

#security #threatintel

5 min read

Anoymask

Aug 22

JavaScript Sandbox Escape via Type Confusion in isolated-vm

#security #threatintel

5 min read

Anoymask

Aug 21

Rust Crate Tampering: Multi-Stage Info-Stealer Malware Launched via build.rs

#security #threatintel

6 min read

Anoymask

Aug 21

MLflow CVE-2026-64849: Cloud Credential Theft via Webhook SSRF

#security #threatintel

6 min read

Anoymask

Aug 21

UAT-10147 AI-Assisted Intrusion and SPECTRE Malware

#security #threatintel

7 min read

Anoymask

Aug 21

Manic Android Malware: Information Theft via Transparent Overlays and Short-Range Device Relaying

#security #threatintel

6 min read

Anoymask

Aug 21

Zimbra CVE-2026-73570: Unauthenticated Command Injection via SMTP

#security #threatintel

6 min read

Anoymask

Aug 21

SilkParasite: Cloud C2 and Multi-Language RATs Targeting Central Asia

#security #threatintel

6 min read

Anoymask

Aug 20

LSHIY: Large-Scale Password Spraying Abusing ROPC and IPv6

#security #threatintel

5 min read

Anoymask

Aug 20

Operation CameraSwarm: Over 14,000 Dahua Cameras Compromised via Three Attack Vectors

#security #threatintel

6 min read

Anoymask

Aug 20

Active Exploitation of Windows IKE Extension RCE (CVE-2026-33824)

#security #threatintel

5 min read

Anoymask

Aug 20

AI-Generated Attack Tools Targeting Siemens S7 PLCs

#security #threatintel

5 min read

Anoymask

Aug 19

Forminator Forms (CVE-2026-15748): Unauthenticated RCE via Forged Upload Settings in Select Fields

#security #threatintel

1

6 min read

Anoymask

Aug 19

Clop's Windchill Web Shell: From Credential Decryption to Design Data Theft Inside the App

#security #threatintel

1

6 min read

Anoymask

Aug 19

Two GitLab GraphQL Vulnerabilities: Unauthenticated Data Tampering and CSRF

#security #threatintel

1

10 min read

Anoymask

Aug 18

F-RevoCRM CVE-2026-71368: Cross-Site Scripting Targeting Logged-in Users

#security #threatintel

1

8

6 min read

Anoymask

Aug 18

Microsoft's AI Defense Research: Generating Detection Test Logs from Attack Procedures

#security #threatintel

7 min read

Anoymask

Aug 18

CrowdStrike's AI Triage Research: How Well Can AI Automatically Judge SOC Alerts?

#security #threatintel

6 min read

Anoymask

Aug 18

ShieldBreak (CVE-2026-69414): Unpatched Local Vulnerability for Privilege Escalation from Defender to SYSTEM

#security #threatintel

6 min read

Anoymask

Aug 17

Evooo1Bot: A Multi-Functional Linux Botnet That Turns Compromised Gateways into SOCKS5 Relays, SSH Spreaders, and DDoS Tools

#security #threatintel

1

10 min read

Anoymask

Aug 15

macOS Screen Sharing CVE-2026-65400: Authentication Bypass Leads to Root Access and Monero Miner Installation

#security #threatintel

1

5 min read

Anoymask

Aug 15

GeoServer jsonArrayContains SQL Injection: Hundreds of Attempts Observed, RCE Conditions, and the 2023 CVE Gap

#security #threatintel

1

10 min read

Anoymask

Aug 15

AmnesiaStealer: macOS Infostealer that Hijacks In-Browser Sessions via ClickFix

#security #threatintel

1

7 min read

Anoymask

Aug 15

SAP Commerce Cloud CVE-2026-58231: Active Exploit Attempts for Unauthenticated RCE

#security #threatintel

1

5 min read

Anoymask

Aug 14

JWR: A Real-Time PhaaS Using WebSockets to Monitor Victim Input and Remotely Control Screen Transitions

#security #threatintel

1

5 min read

Anoymask

Aug 14

VMware vCenter CVE-2026-59310: Active Exploitation of Unauthenticated RCE for Persistent Reverse SSH

#security #threatintel

1

5 min read

Anoymask

Aug 14

Jewelbug: XG-Web Infrastructure Supporting Government Webmail Compromise and Browser Takeover

#security #threatintel

1

6 min read

Anoymask

Aug 14

Akira: Intrusion Stopping EDR via Safe Mode and Exfiltrating Data Before Encryption

#security #threatintel

1

6 min read

Anoymask

Aug 13

Plug and Pwn: Getting Windows SYSTEM Privileges from Fake USB and RDP Devices

#security #threatintel

1

5 min read

Anoymask

Aug 13

City-Forum: Anonymous Data Enumeration Across Salesforce Aura / LWR and ServiceNow Guest Search

#security #threatintel

1

6 min read

Anoymask

Aug 13

WindRelay + SpyNote: Phone Remote Control and NFC Relay for Loan and Card Fraud

#security #threatintel

6 min read

Anoymask

Aug 13

Lazarus "Operation Dream Job": From Windows Zero-Day to EDR Bypass and Backdoor Deployment

#security #threatintel

6 min read

Anoymask

Aug 12

Gunra Ransomware: RaaS Exploiting FortiGate for VDI Sessions, OTP Theft, SaaS Exfiltration, and Encryption

#security #threatintel

11 min read

Anoymask

Aug 12

Kimwolf v7: Android/IoT Botnet with HTTP/2 Browser Spoofing DDoS and ENS/Tor Three-Layer C2

#security #threatintel

9 min read

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Want to connect with Anoymask?