DEV Community

#threatintel

Gathering, analyzing, and applying intelligence about threats and threat actors.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Iris Plaza Breach: Unauthorized Access to External Cloud May Have Exposed Personal Data of Approximately 7.7 Million People

Iris Plaza Breach: Unauthorized Access to External Cloud May Have Exposed Personal Data of Approximately 7.7 Million People

1
Comments
7 min read
1.4 Billion Credential Records Exposed Online: Misconfigured Elasticsearch Analysis

1.4 Billion Credential Records Exposed Online: Misconfigured Elasticsearch Analysis

Comments
1 min read
SonicWall CVE-2026-19868: Authentication Flaw That May Allow SAML and MFA Bypass Using Valid Credentials for Another Authentication Method

SonicWall CVE-2026-19868: Authentication Flaw That May Allow SAML and MFA Bypass Using Valid Credentials for Another Authentication Method

1
Comments
5 min read
Crédit Mutuel Arkéa Breach: Unauthorized Transfers Executed from Bank's Own Accounts via Third-Party Provider Platform

Crédit Mutuel Arkéa Breach: Unauthorized Transfers Executed from Bank's Own Accounts via Third-Party Provider Platform

1
Comments
6 min read
Residential Proxies on White House Network: 6 IPs Used 236 Times by 28 Services

Residential Proxies on White House Network: 6 IPs Used 236 Times by 28 Services

1
Comments
4 min read
Chainalysis Security Incident: Exposure of Live Tokens and Password Hashes for All Users and Suspected Unauthorized Access to KYT

Chainalysis Security Incident: Exposure of Live Tokens and Password Hashes for All Users and Suspected Unauthorized Access to KYT

1
Comments
5 min read
Fake GitHub Security Projects Deploy AsyncRAT and Stealers via Visual Studio, Python, and Go Code

Fake GitHub Security Projects Deploy AsyncRAT and Stealers via Visual Studio, Python, and Go Code

1
Comments
5 min read
D-Link DGS-3130-30TS: Unpatched Issues in DDP Authentication, Access Control, and Firmware Protection

D-Link DGS-3130-30TS: Unpatched Issues in DDP Authentication, Access Control, and Firmware Protection

1
Comments
4 min read
ThreatsDay: 20 Vulnerabilities & Breaches Exposing Enterprise Blind Spots

ThreatsDay: 20 Vulnerabilities & Breaches Exposing Enterprise Blind Spots

Comments
5 min read
Sogou Input Method DNS Hijacking: DarkVigil Backdoor Deployment

Sogou Input Method DNS Hijacking: DarkVigil Backdoor Deployment

Comments
6 min read
WordPress RCE: Active Exploitation & Attacker Methodology

WordPress RCE: Active Exploitation & Attacker Methodology

Comments
5 min read
Barracuda CVE-2026-116606 and CVE-2026-111560: ESG Authorization Bypass and Multi-Product Command Injection

Barracuda CVE-2026-116606 and CVE-2026-111560: ESG Authorization Bypass and Multi-Product Command Injection

Comments
7 min read
3AM Affiliate AI-Loop Automation: Ransom Operations Evolution

3AM Affiliate AI-Loop Automation: Ransom Operations Evolution

Comments
6 min read
cPGuard Supply Chain Compromise: Legitimate Auto-Update Distributes Backdoor and Root Credential Harvesting Script

cPGuard Supply Chain Compromise: Legitimate Auto-Update Distributes Backdoor and Root Credential Harvesting Script

1
Comments
9 min read
Gorbag: WinRAR CVE-2025-8088 and BeautyStealer Used to Quickly Harvest Ukrainian Government and Defense Intelligence

Gorbag: WinRAR CVE-2025-8088 and BeautyStealer Used to Quickly Harvest Ukrainian Government and Defense Intelligence

1
Comments
9 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.