Explore

@threadlinqs.bsky.social Oct 12, 2026, 2:20 PM

AvisLoader's C2 runs over Tox P2P - no domain to sinkhole, delivered by fake DocuSign ClickFix lures. https://intel.threadlinqs.com/threat/TL-2026-3362 #ThreatIntel #AvisLoader #UACMe #ClickFix

AvisLoader: Windows Malware Loader with Tox P2P C2, Delivered via DocuSign-Themed ClickFix Lures

@netsecio.bsky.social Oct 12, 2026, 1:55 PM

Unit 42 uncovers 'Blinder Tunnel,' an Iranian-nexus campaign targeting Iraqi critical infrastructure. Attackers use fake job lures, a custom ShelbyLoader V2 malware, and GitHub for C2 communications. #ThreatIntel #Iran #CyberSecurity #APT

🌐 cyber[.]netsecops[.]io

@threadlinqs.bsky.social Oct 12, 2026, 1:32 PM

GitLab's CI/CD regex compiler flaw allows unauthenticated code execution on self-managed servers. https://intel.threadlinqs.com/threat/TL-2026-3356 #ThreatIntel #CVE_2026_97229 #GitLab #RCE

GitLab CE/EE max-severity unauthenticated code execution flaw in CI/CD Regular Expression Compiler (CVE-2026-97229)

@threadlinqs.bsky.social Oct 12, 2026, 1:15 PM

Google DevSite's OAuth secret was also its Flask signing key - forged cookies led to pickle RCE. https://intel.threadlinqs.com/threat/TL-2026-3355 #ThreatIntel #Python #pickletoolsdis #curl

Google DevSite Flask Session Pickle Deserialization RCE (Unauthenticated) - OAuth Client Secret Reused as Flask SECRET_KEY

@cyberintelligence.bsky.social Oct 12, 2026, 1:00 PM

🔴 PIC GROUP, INC — listed by Akira

📍 United States · Other · 12 Oct 2026
🏴 Akira has listed 1,632 victims since April 2023.

https://cyberthreatintelligence.net/ransomware-victim/pic-group-inc-akira-2026

#ransomware #akira #threatintel

@threadlinqs.bsky.social Oct 12, 2026, 12:48 PM

New IDN tricks make fake apple.com and okta.com lookalikes render as Unicode in Chrome and Gmail. https://intel.threadlinqs.com/threat/TL-2026-3353 #ThreatIntel #Turning #IDNLookalike #Phishing

New IDN Domain Spoofing Techniques (Breaker Characters and Diacritic Handling) Bypass Chromium Lookalike Phishing Protections

@darkwebsonar.bsky.social Oct 12, 2026, 12:39 PM

🇧🇷 TerroahOver claims breach of civil registry portals in Brazil, Ecuador, and Chile, alleging usernames, passwords, emails, and national IDs. 20 incidents in the past 30 days. #DataBreach #ThreatIntel

This entry + more → go.darkwebsonar.io/terroahover-...

@cyfar.ca Oct 12, 2026, 12:32 PM

~Malpedia~
Live open directories exposed an iOS wallet-stealing exploitation platform and victim telemetry.
-
IOCs: 156[.]239[.]230[.]120, hdios[.]cn, 66ds[.]lol
-
#DarkSword #Malware #ThreatIntel

@threadlinqs.bsky.social Oct 12, 2026, 12:29 PM

IBM Verify Access: two unauthenticated deserialization RCEs at CVSS 9.8, and no workaround - only patching. https://intel.threadlinqs.com/threat/TL-2026-3352 #ThreatIntel #CVE_2026_78401 #CVE_2026_78406 #IBMVerifyAccess

IBM Verify Access / Verify Identity Access: 22 Flaws Patched Incl. Unauthenticated RCE via Deserialization (CVE-2026-78401, CVE-2026-78406)

@timb.me.uk Oct 12, 2026, 12:15 PM

If you spotted the Samsung fridge outage a few weeks ago... just spotted reports of someone turning off France's supermarket fridges:

https://www.france24.com/en/live-news/20261012-french-supermarket-chains-say-cyberattack-forced-refrigerator-shutdown

#fridges, #threatintel

@threadlinqs.bsky.social Oct 12, 2026, 12:10 PM

Cyrillic lookalike domains slip past Chrome's homograph checks and render as the real brand. https://intel.threadlinqs.com/threat/TL-2026-3351 #ThreatIntel #IDNHomoglyph #Chrome #Phishing

Unicode Homoglyph IDN Lookalike Domains Bypass Chromium Detection for Phishing

@threadlinqs.bsky.social Oct 12, 2026, 11:35 AM

AI found 16 runtime-verified WordPress plugin flaws - and still needed humans to weed out the false alarms. https://intel.threadlinqs.com/threat/TL-2026-3349 #ThreatIntel #Claude #VulnPlugs #WordPress

AI-Accelerated Hands-On WordPress Plugin Vulnerability Research: 16 Runtime-Reproducible Flaws (Sucuri, Part 1)

@thedailytechfeed.com Oct 12, 2026, 11:31 AM

Old Apache Struts flaw CVE-2016-3081 is being actively exploited—patch now. #ApacheStruts #CVE20163081 #Vulnerability #CyberSecurity #ThreatIntel #LegacySystems https://thedailytechfeed.com/outdated-apache-struts-bug-cve-2016-3081-under-active-attack/

@threadlinqs.bsky.social Oct 12, 2026, 10:41 AM

VulcanRAT207.A: a WhatsApp ZIP to SYSTEM via PoolParty injection into Task Scheduler and a BYOVD AV killer. https://intel.threadlinqs.com/threat/TL-2026-3343 #ThreatIntel #VulcanRAT207A #PoolParty #VulcanRAT207

WhatsApp-Delivered VulcanRAT207.A Injects into Windows Task Scheduler (PoolParty Variant 7) to Run as SYSTEM

@ninjaintelgroup.bsky.social Oct 12, 2026, 10:40 AM

🗞 What We Missed: FBI Strikes Back at ShinyHunters

via Dark Reading
https://www.darkreading.com/identity-access-management-security/fbi-shinyhunters-claims-hack
#cybersecurity #infosec #threatintel

@threadlinqs.bsky.social Oct 12, 2026, 10:19 AM

WARDEN Stealer sells a stealer, crypto clipper and loader in one small Windows binary - by subscription. https://intel.threadlinqs.com/threat/TL-2026-3342 #ThreatIntel #WARDENStealer #winwarden_stealer #WARDEN

WARDENStealer (win.warden_stealer) - Windows x64 MaaS Stealer, Clipper and Loader; MalwareBazaar sample 2dda0c1d...805926e

@threadlinqs.bsky.social Oct 12, 2026, 9:59 AM

Bricksforge's Pro Forms flaw turns a GIF into a PHP shell - no login needed, and it's already exploited. https://intel.threadlinqs.com/threat/TL-2026-3341 #ThreatIntel #CVE_2026_85097 #PHP #Bricksforge

Active Exploitation of Bricksforge WordPress Plugin Unauthenticated File Upload / RCE (CVE-2026-85097, CVSS 9.8-10.0)

@beesint.bsky.social Oct 12, 2026, 9:01 AM

🎣 Phishing Spotlight microsoft[.]marchesi[.]mx 🌐 Stack: Apache 🔗 https://beesint.com/pulse/3d0a4236-e7c6-4e7b-920f-126d8e5a6c60 #OSINT #Phishing #ThreatIntel #CyberSecurity

@hapsis.bsky.social Oct 12, 2026, 9:00 AM

How to remove a Trojan, Virus, Worm, or other Malware

www.bleepingcomputer.com/tutorials/ho...

#Cybersecurity #ThreatIntel #Vulnerability

@threadlinqs.bsky.social Oct 12, 2026, 8:38 AM

Kimsuky swaps LNK for HWP resumes to drop Funhouse ransomware via Quasar RAT hiding in msbuild.exe. https://intel.threadlinqs.com/threat/TL-2026-3335 #ThreatIntel #Funhouse #Quasar #xRAT

Kimsuky-Linked Funhouse Ransomware (Endpoint Ransomware Variant) Distributed via Malicious Hangul Resume Documents and Quasar RAT