A DMZ web app, bash /dev/tcp shells to Sliver infra, then AD enumeration. Egress control is the fix. https://intel.threadlinqs.com/threat/TL-2026-2987 #ThreatIntel #Sliver #socat #SupplyChain

A DMZ web app, bash /dev/tcp shells to Sliver infra, then AD enumeration. Egress control is the fix. https://intel.threadlinqs.com/threat/TL-2026-2987 #ThreatIntel #Sliver #socat #SupplyChain