Tag

#threat-intelligence

1,230 posts35 followers

Explore Hashnode

Alternatives

404 Founders9h ago · 10 min read

Aoki Infostealer Steals Claude, Codex and Cursor Tokens

The Aoki infostealer, also tracked as Aokigahara, has added AI coding assistant credentials to its shopping list. It takes the login and session files of Claude Code, OpenAI Codex, Cursor, GitHub Copi

404-founders.com

404 Founders1d ago · 9 min read

The Firewall Manager That Gave Away Credentials for More Than 500 Firewalls

PEERSTITCH is a FortiGate memory implant. It leaves no persistent binary on disk, opens no ports, makes no outbound connections. Finding it means hunting process memory directly. In September 2024, s

404-founders.com

Cyber Knight1d ago · 5 min read

A 2.7-Rated Flaw Let Attackers Work Without Leaving a Trace

The logs said nothing had happened. Sometime in early 2026, according to CrowdStrike, an intruder was already inside some VMware environments in the United States legal sector, with administrator acce

nulltrace.hashnode.dev

Kazem Mortazavi2d ago · 3 min read

Dark Web Monitoring: Finding a Data Leak Before the Extortion Email Does

Most organizations reassure themselves with one sentence: "we have not been hacked." But that sentence only describes what happens inside the network. Dark web monitoring answers a different question:

securityland.hashnode.dev

Lưu Tuấn Anh3d ago · 12 min read

Red alert CVE-2026-21589: CVSS 9.3 vulnerability threatens the Atlassian "backbone" of businesses

About Atlassian Overview of Atlassian Atlassian is a world-leading enterprise software company founded in Australia. The company specializes in providing tools to support teamwork, project progress t

1 blog.fiscybersec.com

Vũ Nhật Lâm5d ago · 17 min read

RePointing: 17,610 Fake GitHub Repos That Were Never Deleted, Only Re-Aimed

Summary 17,610 fake GitHub repositories are serving SmartLoader, and Apiiro verified a malicious ZIP behind every single one. That is nearly double the largest list published before. What matters is n

blog.fiscybersec.com

Vũ Nhật Lâm5d ago · 12 min read

A Poem on GitHub and a CVE Chain: the PoeLLM Botnet Mining on Exposed AI Infrastructure

Summary PoeLLM is malware that Black Lotus Labs (Lumen) has tracked since April 2026. It has compromised more than 3,400 servers, peaking at over 800 active systems per day. Victims are concentrated i

blog.fiscybersec.com

Lưu Tuấn Anh5d ago · 17 min read

Decoding CVE-2025-8088: How APT Silent Lynx turns WinRAR file compression feature into a system hijacking backdoor

Campaign Summary In October 2026, the security research team from Cisco Talos and Recorded Future Insikt Group published a detailed report on the cyber espionage campaign lasting from June 2025 to Aug

blog.fiscybersec.com

404 FoundersOct 24 · 10 min read

AdFection: Zero-Click Spyware Delivered Through Targeted Ads

The advertising ecosystem was designed to know who you are. That was always the point. Discover-Tech turned that knowledge into a delivery channel for zero-click mercenary spyware via targeted ads - a

404-founders.com

Cyber KnightOct 23 · 4 min read

The Firm That Audits Everyone's Risk Just Landed on a Ransomware Leak Site

Nobody expects the auditors to get audited. On October 22, a new name appeared on the Everest ransomware group's leak site — and it made incident-response people across the world pause mid-scroll: PwC

nulltrace.hashnode.dev

Search Hashnode

Explore Hashnode

Trending tags this week

Aoki Infostealer Steals Claude, Codex and Cursor Tokens

The Firewall Manager That Gave Away Credentials for More Than 500 Firewalls

A 2.7-Rated Flaw Let Attackers Work Without Leaving a Trace

Dark Web Monitoring: Finding a Data Leak Before the Extortion Email Does

Red alert CVE-2026-21589: CVSS 9.3 vulnerability threatens the Atlassian "backbone" of businesses

RePointing: 17,610 Fake GitHub Repos That Were Never Deleted, Only Re-Aimed

A Poem on GitHub and a CVE Chain: the PoeLLM Botnet Mining on Exposed AI Infrastructure

Decoding CVE-2025-8088: How APT Silent Lynx turns WinRAR file compression feature into a system hijacking backdoor

AdFection: Zero-Click Spyware Delivered Through Targeted Ads

The Firm That Audits Everyone's Risk Just Landed on a Ransomware Leak Site