Anoymask - DEV Community

Anoymask

Nov 15

FaceStealer: Fake Video Conferences and Recorded Footage Used to Induce Self-Infection and Steal Cryptocurrency and Developer Accounts

#security #threatintel

1

8 min read

Anoymask

Nov 14

SignDrop: Windows Local Privilege Escalation Chaining CLFS Authentication Files and Defender Update RPC

#security #threatintel

1

4 min read

Anoymask

Nov 14

SilentAir and LIMINAL PANDA: Exploiting SS7, Diameter, and GTP-U Through Compromised Telecommunication Operators

#security #threatintel

1

7 min read

Anoymask

Nov 14

TightVNC and UltraVNC Viewer CVE-2026-128321: Heap Overflow Caused by Malicious Server

#security #threatintel

1

5 min read

Anoymask

Nov 14

PromZard CVE-2026-127109: JavaScript Code Injection via Context Key Source Embedding

#security #threatintel

1

4 min read

Anoymask

Nov 14

ImageTragick2: Arbitrary File Read and Write in ImageMagick via SVG and PostScript Processing

#security #threatintel

1

6 min read

Anoymask

Nov 14

ComfyUI-Easy-Use CVE-2026-123790: Unauthenticated Path Traversal Leading to Remote Code Execution on Restart

#security #threatintel

1

4 min read

Anoymask

Nov 13

SCKit: ScreenConnect Panels Abused via Blank RMM+ Access Keys to Deploy Rogue Clients and Cookie Relays to 288 Endpoints

#security #threatintel

2

7 min read

Anoymask

Nov 13

CL-STA-1238: 25 Autonomous Attacks Using Cairn; Unauthorized Access or Data Retrieval Confirmed at 10 Organizations

#security #threatintel

2

7 min read

Anoymask

Nov 13

CSP Credential Theft Without JavaScript via Missing form-action or Allowed Same-Page Submissions, meta refresh, and Referer

#security #threatintel

2

5 min read

Anoymask

Nov 13

Post-Training Supply Chain Attacks on Coding Agents: Planting Tool-Execution Backdoors via Dataset and Checkpoint Poisoning

#security #threatintel

2

7 min read

Anoymask

Nov 13

wfx: CI Secret Stealer Pushed to Over 8,900 Repositories via Stolen GitHub Credentials, Aiming for Cloud Persistence

#security #threatintel

2

7 min read

Anoymask

Nov 12

Falcon C2: Controlling Browsers and Stealing Passwords and Cookies Through JavaScript on Compromised Websites

#security #threatintel

2

6 min read

Anoymask

Nov 12

Microsoft MDASH: Filtering 26,502 AI Scan Results Down to 59 Kernel Bugs and Eight Root Exploits

#security #threatintel

2

4 min read

Anoymask

Nov 12

GSocket: Encrypted C2 over Shared Relays and Multi-Layer Persistence Following Public Web Application Compromise

#security #threatintel

2

5 min read

Anoymask

Nov 12

Operation Snowball: DeepSeek Agent Moves from BroadWorks XXE into a Telecom Provider's Internal Network and Autonomously Adapts to Defenses

#security #threatintel

2

6 min read

Anoymask

Nov 12

AntiFox-Linked Activity: IIS Web Shells, Misuse of Stolen AWS Credentials, Secret Retrieval, and S3 Operations

#security #threatintel

2

6 min read

Anoymask

Nov 11

Xen Orchestra VSA-2026-062: Empty-Object Cookie Enables Authentication Bypass and Root Takeover of XCP-ng Nodes

#security #threatintel

1

5 min read

Anoymask

Nov 11

Qubole Supply Chain Attack: Vendor IAM Users Abused to Assume Customer AWS Roles, Steal Secrets, and Exfiltrate S3 Data

#security #threatintel

1

5 min read

Anoymask

Nov 11

Chrome CVE-2026-125350: XML Use-After-Free Zero-Day Actively Exploited

#security #threatintel

1

4 min read

Anoymask

Nov 11

Turla Cereal: Hijacks Exchange Transport Agent Handlers to Selectively Steal NATO- and EU-Related Emails

#security #threatintel

1

5 min read

Anoymask

Nov 11

SAP ICM2SHELL and PROXYGATE: Pre-Authentication RCE via WebSocket Memory Corruption and Internal Host Spoofing in the Gateway

#security #threatintel

1

5 min read

Anoymask

Nov 11

Outlook CVE-2026-124194: Opening a Message File Triggers an External Connection Without Warning and Leaks an NTLM Authentication Response

#security #threatintel

1

4

5 min read

Anoymask

Nov 11

Google DeepMind RSA-1024 Research: AI Agents Make Signature Forgery Computation 3.5x More Efficient, Batch Factoring Evaluated Theoretically

#security #threatintel

2

5 min read

Anoymask

Nov 11

Mittwald MCP Server Compromise: Vulnerability Exploited to Access 56 Customer Projects, AI Usage Inferred from Speed

#security #threatintel

1

5 min read

Anoymask

Nov 11

CISA KEV Addition: GPUStack Authentication Bypass, FreeSWITCH SIP Command Injection, and Aspera Faspex Privilege Bypass

#security #threatintel

1

6 min read

Anoymask

Nov 11

N-able N-central Vulnerabilities: Seven Fixed in HF2 and a Residual Pre-Authentication Root Chain (CVE-2026-90436)

#security #threatintel

1

7 min read

Anoymask

Nov 11

Beget Cloud Wiper Attack: Management Plane Breached, Data Erased, VPS, S3, and Kubernetes Infrastructure Rebuilt

#security #threatintel

1

4 min read

Anoymask

Nov 9

Iris Plaza Breach: Unauthorized Access to External Cloud May Have Exposed Personal Data of Approximately 7.7 Million People

#security #threatintel

6

4

7 min read

Anoymask

Nov 8

SonicWall CVE-2026-19868: Authentication Flaw That May Allow SAML and MFA Bypass Using Valid Credentials for Another Authentication Method

#security #threatintel

1

5 min read

Anoymask

Nov 8

Crédit Mutuel Arkéa Breach: Unauthorized Transfers Executed from Bank's Own Accounts via Third-Party Provider Platform

#security #threatintel

1

6 min read

Anoymask

Nov 7

Residential Proxies on White House Network: 6 IPs Used 236 Times by 28 Services

#security #threatintel

1

4 min read

Anoymask

Nov 7

Fake GitHub Security Projects Deploy AsyncRAT and Stealers via Visual Studio, Python, and Go Code

#security #threatintel

1

5 min read

Anoymask

Nov 7

D-Link DGS-3130-30TS: Unpatched Issues in DDP Authentication, Access Control, and Firmware Protection

#security #threatintel

1

4 min read

Anoymask

Nov 7

Chainalysis Security Incident: Exposure of Live Tokens and Password Hashes for All Users and Suspected Unauthorized Access to KYT

#security #threatintel

1

5 min read

Anoymask

Nov 6

CWPdoor: cwpsrv Replacement Enables Passive Command Execution via Signed HTTP Headers

#cybersecurity #infosec #linux #security

1

8 min read

Anoymask

Nov 6

Fake AI Events: Device Code Phishing and AiTM Target Microsoft and Google Accounts

#cybersecurity #infosec #microsoft #security

1

2

8 min read

Anoymask

Nov 6

*sshole: OpenSSH Password Authentication Bypass on musl Systems Without PAM

#cybersecurity #linux #security

1

8 min read

Anoymask

Nov 6

OpenAI's Linux Kernel Research: 948 Unique LPEs and Candidate Patches

#ai #cybersecurity #linux #security

1

7 min read

Anoymask

Nov 6

SHIRASAGI: Authenticated OS Command Injection and Stored XSS Fixed in v1.21.1

#cybersecurity #infosec #security #vulnerabilities

1

8 min read

Anoymask

Nov 6

GhostMap: Malformed APK Resources Can Trap Android Devices in a Persistent Boot Loop

#android #cybersecurity #mobile #security

1

7 min read

Anoymask

Nov 5

SonicWall GMS EOL: Unauthenticated File Read and High-Privilege SQL Injection Without Patches

#security #threatintel

2

6 min read

Anoymask

Nov 5

APT29-Linked Mobile Watering Holes: Plerdy Compromise and iOS/Android Exploit Chains

#security #threatintel

2

7 min read

Anoymask

Nov 5

Burp AT: Automating CRLF-Powered Desync via HTTP Header Injection in Four Phases

#security #threatintel

2

5 min read

Anoymask

Nov 5

NIKKE PC Launcher Supply Chain Compromise: K2F Remote-Control Agent Distributed via Official CDN Scripts

#security #threatintel

2

7 min read

Anoymask

Nov 5

DreamHost File Manager Breach: FTP/SFTP Credentials Accessed; Webmail Sessions May Have Been Exposed

#security #threatintel

2

6 min read

Anoymask

Nov 4

WorkOS Sales App Breach: ARTEX-Linked Reconnaissance and Exploit Attempts, CRM and Customer Conversation Data Access

#security #threatintel

1

7 min read

Anoymask

Nov 4

Node-RED CVE-2026-58115: Single-POST Attempts to Deploy Linux Payloads and Webshells

#security #threatintel

1

8 min read

Anoymask

Nov 4

cPGuard Supply Chain Compromise: Legitimate Auto-Update Distributes Backdoor and Root Credential Harvesting Script

#security #threatintel

1

9 min read

Anoymask

Nov 4

Gorbag: WinRAR CVE-2025-8088 and BeautyStealer Used to Quickly Harvest Ukrainian Government and Defense Intelligence

#security #threatintel

1

9 min read

Anoymask

Nov 4

3AM Ransomware: Signs of AI Assistance, AD Trust Changes, and Around 37 Systems Encrypted

#security #threatintel

1

9 min read

Anoymask

Nov 4

Barracuda CVE-2026-116606 and CVE-2026-111560: ESG Authorization Bypass and Multi-Product Command Injection

#security #threatintel

6 min read

Anoymask

Nov 3

XCPE: Firmware-Embedded Backdoor Turns Over 1.3 Million Devices into Proxy and Ad Fraud Botnets

#security #threatintel

1

7 min read

Anoymask

Nov 3

LLMJacking: Stolen Credentials Fuel LLM Access Resale and $1M in Cumulative Charges

#security #threatintel

1

9 min read

Anoymask

Nov 3

Synology C3RB3R: NAS Devices Encrypted via Exploitation of Known Vulnerabilities in Outdated DSM

#security #threatintel

1

6 min read

Anoymask

Nov 2

October 2026 Security Review: Compromised "Legitimate Privileges" and the Boundaries of Distribution and AI Execution

#security #threatintel

1

2

9 min read

Anoymask

Nov 1

Binance $6.34B Theft: Fake Interviews, Internal AI Tool Abuse, and Wallet Signing Service Compromise

#security #threatintel

1

12 min read

Anoymask

Nov 1

VOLTA: Infostealer Uses LLMs to Assess Stolen Data and Prioritize High-Value Victims

#security #threatintel

1

7 min read

Anoymask

Nov 1

Northflank Breach: Suspected Environment Variable Leak and Unauthorized Use of Customer AI API Keys

#security #threatintel

1

6 min read

Anoymask

Nov 1

Android SMS of Death: Zero-Click Telephony DoS via Malformed WAP Push SMS

#security #threatintel

3

2

6 min read

4 Week Community Wellness Streak

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Want to connect with Anoymask?