@thedailytechfeed.comOld Apache Struts flaw CVE-2016-3081 is being actively exploited—patch now. #ApacheStruts #CVE20163081 #Vulnerability #CyberSecurity #ThreatIntel #LegacySystems https://thedailytechfeed.com/outdated-apache-struts-bug-cve-2016-3081-under-active-attack/
@threadlinqs.bsky.socialVulcanRAT207.A: a WhatsApp ZIP to SYSTEM via PoolParty injection into Task Scheduler and a BYOVD AV killer. https://intel.threadlinqs.com/threat/TL-2026-3343 #ThreatIntel #VulcanRAT207A #PoolParty #VulcanRAT207
@ninjaintelgroup.bsky.social🗞 What We Missed: FBI Strikes Back at ShinyHunters
via Dark Reading
https://www.darkreading.com/identity-access-management-security/fbi-shinyhunters-claims-hack
#cybersecurity #infosec #threatintel
@threadlinqs.bsky.socialWARDEN Stealer sells a stealer, crypto clipper and loader in one small Windows binary - by subscription. https://intel.threadlinqs.com/threat/TL-2026-3342 #ThreatIntel #WARDENStealer #winwarden_stealer #WARDEN
@threadlinqs.bsky.socialBricksforge's Pro Forms flaw turns a GIF into a PHP shell - no login needed, and it's already exploited. https://intel.threadlinqs.com/threat/TL-2026-3341 #ThreatIntel #CVE_2026_85097 #PHP #Bricksforge
@beesint.bsky.social🎣 Phishing Spotlight microsoft[.]marchesi[.]mx 🌐 Stack: Apache 🔗 https://beesint.com/pulse/3d0a4236-e7c6-4e7b-920f-126d8e5a6c60 #OSINT #Phishing #ThreatIntel #CyberSecurity
@hapsis.bsky.socialHow to remove a Trojan, Virus, Worm, or other Malware
@threadlinqs.bsky.socialKimsuky swaps LNK for HWP resumes to drop Funhouse ransomware via Quasar RAT hiding in msbuild.exe. https://intel.threadlinqs.com/threat/TL-2026-3335 #ThreatIntel #Funhouse #Quasar #xRAT
@darkwebsonar.bsky.social🇺🇸 We tracked a ransomware claim by The Gentlemen listing MoneyGram, the global money transfer company serving 60 million customers across 200+ countries. #Ransomware #ThreatIntel
More on this and other incidents → go.darkwebsonar.io/the-gentleme...
@ninjaintelgroup.bsky.social📊 Ransomware data-drop: flat 0% week-on-week (233 claims). Most active: TheGentlemen. Hot sector: Manufacturing.
📦 ninjasignal: 182 installs this week · 33 clones.
Live data + the Python client → ninjalabz.io/developers
#ransomware #threatintel
@threadlinqs.bsky.socialA 2016 Struts bug is back: S2-032 RCE is now CISA KEV-listed as exploited. Patching alone isn't enough. https://intel.threadlinqs.com/threat/TL-2026-3332 #ThreatIntel #CVE_2016_3081 #linux #Meterpreter
@securityonline.bsky.socialWarden Stealer, a fast-growing Rust infostealer, steals AI agent tokens, browser data, and crypto while bundling its own loader and clipper.
#WardenStealer #Infostealer #RustMalware #MaaS #AIAgents #CryptoClipper #ThreatIntel #Cybersecurity
@threadlinqs.bsky.socialA TL0 Discourse account, a JPEG bomb and a race condition end in local file read via Ghostscript. https://intel.threadlinqs.com/threat/TL-2026-3329 #ThreatIntel #CVE_2026_55420 #ImageMagick #Ghostscript
@ninjaintelgroup.bsky.social🗞 Data Broker Radaris Loses Domains in Privacy Fight
via Krebs on Security
https://krebsonsecurity.com/2026/09/data-broker-radaris-loses-domains-in-privacy-fight/
#cybersecurity #infosec #threatintel
@threadlinqs.bsky.socialCasbaneiro stays silent until you open your bank's website - then the injected RegSvcs.exe wakes up. https://intel.threadlinqs.com/threat/TL-2026-3328 #ThreatIntel #Metamorfo #Rakhni #Casbaneiro
@sequretek.bsky.socialFBI seized Flax Typhoon tools (DOJ, 8 Oct). Hackers took 1.5M World Cup files (The National). Lock vendor logins. Would logs catch either? #Cybersecurity #DataBreach #ThreatIntel #CriticalInfra #Sequretek
@hapsis.bsky.socialAI vulnerability patching has a grading problem
@cyberintelligence.bsky.social🔴 Thegentlemen includes BigID, secures enterprise data.
📍 United States · Technology · 12 Oct 2026
🏴 Thegentlemen has listed 922 victims since February 2023.
https://cyberthreatintelligence.net/ransomware-victim/bigid-thegentlemen-2026
@cyberintelligence.bsky.social🔴 Confluent — listed by Thegentlemen
📍 United States · Technology · 12 Oct 2026
🏴 Thegentlemen has listed 922 victims since February 2023.
https://cyberthreatintelligence.net/ransomware-victim/confluent-thegentlemen-2026
@cyberintelligence.bsky.social🔴 Redact Eversource Energy from leak site
📍 United States · Energy & Utilities · 12 Oct 2026
🏴 Redact has listed 3 victims since June 2026.
https://cyberthreatintelligence.net/ransomware-victim/eversource-energy-redact-2026