Grilled Cheese

ExploreLog inSign up
Terms of UsePrivacy PolicyCommunity StandardsHelpGet the app

Grilled Cheese is a product of Village Compute

Version devBuilt at: 2026-10-15 18:51:49 EDT

PhotosVideosAllPeople
LatestRanked
Load more
E@etairos-ai.bsky.socialSep 20, 2026, 8:05 PM

CISA put three exploited Linux kernel flaws on KEV. Federal agencies have two days to patch.

Same kernels run your ICS and OT fleet, without the mandate.

#ThreatIntel #ICS

https://threat-intelligence.redeyesecurity.com/blog/cisa-kev-three-linux-kernel-flaws-exploited-2026

Photo, no description
@darkwebsonar.bsky.socialSep 20, 2026, 12:39 PM

🇪🇸 We tracked a data breach claim by horrible listing ApoloEnergia, a Spanish energy provider. The claim alleges 40,000 customer records with names, national IDs, phone numbers, emails, addresses, and IBANs. #DataBreach #ThreatIntel

This entry + more → go.darkwebsonar.io/horrible-blu...

Photo, no description
@darkwebsonar.bsky.socialSep 20, 2026, 8:22 AM

🇮🇩 We tracked a data breach claim by DBHunter listing Universitas Singaperbangsa Karawang (UNSIKA) in Indonesia. The actor claims access to lecturer records with names, employee IDs, national ID numbers, and email addresses. #DataBreach #ThreatIntel

This entry + more →

Photo, no description
@threadlinqs.bsky.socialSep 19, 2026, 6:47 PM

One click makes an admin's browser silently install a theme - then WordPress hands attackers RCE. https://intel.threadlinqs.com/threat/TL-2026-2587 #ThreatIntel #click2shell_pocpy #Click2Shell #WordPress

Click2Shell WordPress Exploit Chain Lets Attackers Gain RCE With a Single Malicious Link
@threadlinqs.bsky.socialSep 19, 2026, 5:25 PM

A hard-coded crypto key in SolarWinds ARM lets any adjacent attacker become SYSTEM. No auth needed. https://intel.threadlinqs.com/threat/TL-2026-2585 #ThreatIntel #CVE_2026_28326 #SolarWinds #SolarWindsARM

SolarWinds Access Rights Manager Hard-Coded Cryptographic Key (CVE-2026-28326) Enables Unauthenticated RCE
@threadlinqs.bsky.socialSep 19, 2026, 5:04 PM

ShinyHunters hacked Clop's own leak site and turned the ransomware gang into the victim. https://intel.threadlinqs.com/threat/TL-2026-2584 #ThreatIntel #CVE_2025_61882 #Clop #scattered

ShinyHunters Hacks Clop Ransomware Gang's Tor Leak Site via Grav CMS File Upload Flaw, Threatens 72-Hour Extortion
@threadlinqs.bsky.socialSep 19, 2026, 4:32 PM

CISA flags actively exploited Linux kernel bugs: kTLS leak, ebtables privesc, AF_ALG corruption. https://intel.threadlinqs.com/threat/TL-2026-2582 #ThreatIntel #CVE_2025_39682 #CVE_2026_53266 #Linux

CISA Flags Three Actively Exploited Linux Kernel Vulnerabilities: kTLS Receive-Path Disclosure/DoS, ebtables SNAT Privilege Escalation, and AF_ALG Race Condition (CVE-2025-39682, CVE-2026-53266, CVE-2025-39964)
@threadlinqs.bsky.socialSep 19, 2026, 4:02 PM

North Korea's WaterPlum poses as recruiters, then drops crypto-stealing malware via your own coding test. https://intel.threadlinqs.com/threat/TL-2026-2581 #ThreatIntel #BeaverTail #InvisibleFerret #OtterCookie

North Korean WaterPlum (Contagious Interview) Campaign Infects 30,000 Devices, Steals $10.71M in Crypto via Fake Job Interviews and npm/PyPI/Go/Rust Supply-Chain Packages
@threadlinqs.bsky.socialSep 19, 2026, 10:58 AM

TA458's webmail exploits need zero clicks - just opening the email pwns Zimbra, Roundcube, SOGo and more. https://intel.threadlinqs.com/threat/TL-2026-2579 #ThreatIntel #CVE_2026_8496 #CVE_2025_27915 #SpyPress

Operation RoundPress: TA458 Deploys SpyPress Malware via Half-Click Webmail Zero-Days (CVE-2025-27915, CVE-2025-3929, CVE-2026-8496)
@threadlinqs.bsky.socialSep 19, 2026, 10:28 AM

DPRK hackers pose as recruiters, then trick developers into running malware that drains crypto wallets. https://intel.threadlinqs.com/threat/TL-2026-2577 #ThreatIntel #BeaverTail #InvisibleFerret #OtterCookie

North Korean WaterPlum (Contagious Interview) Hackers Target IT Professionals with BeaverTail, InvisibleFerret, OtterCookie, OtterCandy, StoatWaffle Malware
@threadlinqs.bsky.socialSep 19, 2026, 10:08 AM

An LLM reverse-engineered Cortex XDR's entire detection stack and found how to dump SAM hives undetected. https://intel.threadlinqs.com/threat/TL-2026-2576 #ThreatIntel #FindPOS #GPT54Cyber #GPT55Cyber

LLM-Driven Reverse Engineering of Palo Alto Cortex XDR Yields Working EDR Evasion (SpecterOps)
@threadlinqs.bsky.socialSep 19, 2026, 9:28 AM

Orkes Conductor's GraalVM sandbox has a hole - three unauthenticated API calls get you root. https://intel.threadlinqs.com/threat/TL-2026-2574 #ThreatIntel #CVE_2026_58138 #ExploitDB #Nuclei

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform (CVE-2026-58138) Exploited in the Wild
@darkwebsonar.bsky.socialSep 19, 2026, 4:06 AM

🇵🇪 Frouzenx claims SQL injection attack on Government of Peru systems, alleging exfiltration of employee data. We've tracked 13 Frouzenx listings in the past 30 days. #DataBreach #ThreatIntel

Details + live feed → go.darkwebsonar.io/frouzenx-blu...

Photo, no description
@threadlinqs.bsky.socialSep 18, 2026, 10:45 PM

A stolen API key turned Brevo's CDN into a supply-chain weapon - fake CAPTCHAs, silent WordPress backdoors. https://intel.threadlinqs.com/threat/TL-2026-2573 #ThreatIntel #ClickFix #Web #Brevo

Brevo Supply-Chain Attack: Stolen Cloudflare API Key Deploys Malicious Edge Worker, Backdoors 100,000+ Websites via ClickFix and a Rogue WordPress Plugin
@threadlinqs.bsky.socialSep 18, 2026, 10:22 PM

Four public root exploits for Linux kernel bugs - one needs zero privileges, just the stock SCTP module. https://intel.threadlinqs.com/threat/TL-2026-2572 #ThreatIntel #CVE_2026_80844 #CVE_2026_81000 #DirtyAH6

"LPE Quartet": Public Exploits Released for Four Linux Kernel Local-Root Flaws (DirtyAH6, TUNderflow, PPPoEject, DiagSpill)
@threadlinqs.bsky.socialSep 18, 2026, 9:42 PM

Ransomware hits Ellis County, KS government IT systems - officials scramble to contain the blackout. https://intel.threadlinqs.com/threat/TL-2026-2571 #ThreatIntel #Ransomware #EllisCounty #Kansas

Ransomware Attack Disrupts IT Systems and Services in Ellis County, Kansas
@threadlinqs.bsky.socialSep 18, 2026, 9:14 PM

A zero-length TLS record can turn any Linux user into root - and CISA says it's already being exploited. https://intel.threadlinqs.com/threat/TL-2026-2570 #ThreatIntel #CVE_2025_39682 #Google #Linux

CVE-2025-39682 - Linux Kernel net/tls rx_list Zero-Length Record Use-After-Free Added to CISA KEV Catalog
E@etairos-ai.bsky.socialSep 18, 2026, 2:06 PM

Cisco ISE zero-day CVE-2026-76460: auth bypass to root on your network policy engine.

Own ISE and you own who gets on the network.

#ThreatIntel #ICS #CriticalInfrastructure
https://threat-intelligence.redeyesecurity.com/blog/cisco-ise-zero-day-cve-2026-76460-auth-bypass-2026

Photo, no description
@threadlinqs.bsky.socialSep 18, 2026, 1:42 PM

AI-generated exploit chained an unflagged libheif bug with an OpenAI SSO flaw to reach internal code. https://intel.threadlinqs.com/threat/TL-2026-2568 #ThreatIntel #Claude #HEIF #libheif

AI-Built Exploit Chain Turns Unpatched libheif Flaw and OpenAI Forum Sign-In Bug into Internal Code Access
@threadlinqs.bsky.socialSep 18, 2026, 1:12 PM

A fake ChatGPT billing email hides behind Google's own redirect API to steal your OpenAI login. https://intel.threadlinqs.com/threat/TL-2026-2567 #ThreatIntel #PHP #ChatGPT #OpenAI

Phishing Campaign Impersonates ChatGPT Subscription Billing Alerts to Steal OpenAI Credentials via Google API Open-Redirect and nxcli.io Infrastructure