Threadlinqs

@threadlinqs.bsky.social

The Unified Security Engineering and Intelligence platform threadlinqs.com

75 videos published

Message

Latest videos

See all

Chrome's newest patch closes a CSS sandbox escape - update and relaunch your browser now. https://intel.threadlinqs.com/threat/TL-2026-4102 #ThreatIntel #CVE_2026_113341 #CVE_2026_113279 #Chrome

0 views 22/10/2026

Hijacked Tor exit relays swapped SSH host keys to steal passwords and plant Ebury. https://intel.threadlinqs.com/threat/TL-2026-4101 #ThreatIntel #Ebury #paramiko #SupplyChain

0 views 22/10/2026

A low-skill actor let AI agents run the crime wave: brute force, DB theft, Wi-Fi cracking, VoIP fraud. https://intel.threadlinqs.com/threat/TL-2026-4098 #ThreatIntel #Hermes #Cursor #DeepSeek

0 views 22/10/2026

Shai-Hulud npm worm runs TruffleHog on your CI runner and dumps the secrets into GitHub repos. https://intel.threadlinqs.com/threat/TL-2026-4090 #ThreatIntel #ShaiHulud #TruffleHog #SupplyChain

0 views 22/10/2026

StealthRoute's AI writes the lures, then cloaks them - scanners see a 404, victims see the phish. https://intel.threadlinqs.com/threat/TL-2026-4088 #ThreatIntel #Athena #StealthRoute #Phishing

0 views 22/10/2026

Node.js patches a Brotli decoder RCE and two TLS hostname-check bypasses. https://intel.threadlinqs.com/threat/TL-2026-4075 #ThreatIntel #CVE_2026_111497 #CVE_2026_105483 #Nodejs

0 views 21/10/2026

Shorts

See all

Chrome's newest patch closes a CSS sandbox escape - update and relaunch your browser now. https://intel.threadlinqs.com/threat/TL-2026-4102 #ThreatIntel #CVE_2026_113341 #CVE_2026_113279 #Chrome

Hijacked Tor exit relays swapped SSH host keys to steal passwords and plant Ebury. https://intel.threadlinqs.com/threat/TL-2026-4101 #ThreatIntel #Ebury #paramiko #SupplyChain

A low-skill actor let AI agents run the crime wave: brute force, DB theft, Wi-Fi cracking, VoIP fraud. https://intel.threadlinqs.com/threat/TL-2026-4098 #ThreatIntel #Hermes #Cursor #DeepSeek

Shai-Hulud npm worm runs TruffleHog on your CI runner and dumps the secrets into GitHub repos. https://intel.threadlinqs.com/threat/TL-2026-4090 #ThreatIntel #ShaiHulud #TruffleHog #SupplyChain

StealthRoute's AI writes the lures, then cloaks them - scanners see a 404, victims see the phish. https://intel.threadlinqs.com/threat/TL-2026-4088 #ThreatIntel #Athena #StealthRoute #Phishing

Node.js patches a Brotli decoder RCE and two TLS hostname-check bypasses. https://intel.threadlinqs.com/threat/TL-2026-4075 #ThreatIntel #CVE_2026_111497 #CVE_2026_105483 #Nodejs

First videos

See all

In a Claroty lab test, an AI agent reproduced 3 already-patched Danfoss refrigeration-controller flaws in about 28 minutes for roughly $6. Patch to R4.3.1 and get these controllers off the internet. https://intel.threadlinqs.com/threat/TL-2026-3888 #ThreatIntel #CVE_2025_41450 #CVE_2025_41451

0 views 19/10/2026

Judge denies WhatsApp's NSO contempt bid - alleged post-injunction phishing stays unproven. https://intel.threadlinqs.com/threat/TL-2026-3914 #ThreatIntel #Chrysaor #WhatsApp #NSO

0 views 19/10/2026

ClearFake's C2 lives on a blockchain testnet - free, immutable, and impossible to sinkhole. https://intel.threadlinqs.com/threat/TL-2026-3919 #ThreatIntel #SectopRAT #ACR #ClearFake

0 views 20/10/2026

DPRK's InvisibleFerret now ships as compiled Cython modules - script-only detection will miss it. https://intel.threadlinqs.com/threat/TL-2026-3920 #ThreatIntel #BeaverTail #InvisibleFerret #OtterCookie

0 views 20/10/2026

UNC5820 turns a FortiOS CLI traversal bug into root, then hides PEERSTITCH in firewall daemons. https://intel.threadlinqs.com/threat/TL-2026-3921 #ThreatIntel #CVE_2025_61624 #CVE_2024_47575 #PEERSTITCH

0 views 20/10/2026

Tortoiseshell hides TWOSTROKE and a reverse SSH tunnel inside a fake wtsapi32.dll. https://intel.threadlinqs.com/threat/TL-2026-3923 #ThreatIntel #LIGHTRAIL #MINIBIKE #MiniJunk

0 views 20/10/2026

Threadlinqs

Latest videos

Chrome's newest patch closes a CSS sandbox escape - update and relaunch your browser now. https://intel.threadlinqs.com/threat/TL-2026-4102 #ThreatIntel #CVE_2026_113341 #CVE_2026_113279 #Chrome

Hijacked Tor exit relays swapped SSH host keys to steal passwords and plant Ebury. https://intel.threadlinqs.com/threat/TL-2026-4101 #ThreatIntel #Ebury #paramiko #SupplyChain

A low-skill actor let AI agents run the crime wave: brute force, DB theft, Wi-Fi cracking, VoIP fraud. https://intel.threadlinqs.com/threat/TL-2026-4098 #ThreatIntel #Hermes #Cursor #DeepSeek

Shai-Hulud npm worm runs TruffleHog on your CI runner and dumps the secrets into GitHub repos. https://intel.threadlinqs.com/threat/TL-2026-4090 #ThreatIntel #ShaiHulud #TruffleHog #SupplyChain

StealthRoute's AI writes the lures, then cloaks them - scanners see a 404, victims see the phish. https://intel.threadlinqs.com/threat/TL-2026-4088 #ThreatIntel #Athena #StealthRoute #Phishing

Node.js patches a Brotli decoder RCE and two TLS hostname-check bypasses. https://intel.threadlinqs.com/threat/TL-2026-4075 #ThreatIntel #CVE_2026_111497 #CVE_2026_105483 #Nodejs

Popular videos

One phished Intune admin account became a mass wiper. Hacktivists now fight hybrid war. https://intel.threadlinqs.com/threat/TL-2026-3963 #ThreatIntel #Dosia #telegram #DDoSia

One crafted regex, no login needed: unauthenticated RCE on self-managed GitLab. Patch now. https://intel.threadlinqs.com/threat/TL-2026-4063 #ThreatIntel #CVE_2026_110264 #Ruby #PUMAKIT

Shai-Hulud npm worm runs TruffleHog on your CI runner and dumps the secrets into GitHub repos. https://intel.threadlinqs.com/threat/TL-2026-4090 #ThreatIntel #ShaiHulud #TruffleHog #SupplyChain

Fake Claude and ChatGPT installers are stealing session tokens - the employee pastes the payload. https://intel.threadlinqs.com/threat/TL-2026-4072 #ThreatIntel #Amatera #Lumma #AMOS

AI pentest agents are chaining SQLi into xp_cmdshell and IIS web shells in real intrusions. https://intel.threadlinqs.com/threat/TL-2026-4058 #ThreatIntel #Cairn #CyberStrikeAI #CupcakeC2

LiteLLM hijacked again: 1.107.0 wheels run a credential stealer inside every Python process on the host. https://intel.threadlinqs.com/threat/TL-2026-4042 #ThreatIntel #privcollect #Python #ATLAS

Shorts

Chrome's newest patch closes a CSS sandbox escape - update and relaunch your browser now. https://intel.threadlinqs.com/threat/TL-2026-4102 #ThreatIntel #CVE_2026_113341 #CVE_2026_113279 #Chrome

Hijacked Tor exit relays swapped SSH host keys to steal passwords and plant Ebury. https://intel.threadlinqs.com/threat/TL-2026-4101 #ThreatIntel #Ebury #paramiko #SupplyChain

A low-skill actor let AI agents run the crime wave: brute force, DB theft, Wi-Fi cracking, VoIP fraud. https://intel.threadlinqs.com/threat/TL-2026-4098 #ThreatIntel #Hermes #Cursor #DeepSeek

Shai-Hulud npm worm runs TruffleHog on your CI runner and dumps the secrets into GitHub repos. https://intel.threadlinqs.com/threat/TL-2026-4090 #ThreatIntel #ShaiHulud #TruffleHog #SupplyChain

StealthRoute's AI writes the lures, then cloaks them - scanners see a 404, victims see the phish. https://intel.threadlinqs.com/threat/TL-2026-4088 #ThreatIntel #Athena #StealthRoute #Phishing

Node.js patches a Brotli decoder RCE and two TLS hostname-check bypasses. https://intel.threadlinqs.com/threat/TL-2026-4075 #ThreatIntel #CVE_2026_111497 #CVE_2026_105483 #Nodejs

First videos

In a Claroty lab test, an AI agent reproduced 3 already-patched Danfoss refrigeration-controller flaws in about 28 minutes for roughly $6. Patch to R4.3.1 and get these controllers off the internet. https://intel.threadlinqs.com/threat/TL-2026-3888 #ThreatIntel #CVE_2025_41450 #CVE_2025_41451

Judge denies WhatsApp's NSO contempt bid - alleged post-injunction phishing stays unproven. https://intel.threadlinqs.com/threat/TL-2026-3914 #ThreatIntel #Chrysaor #WhatsApp #NSO

ClearFake's C2 lives on a blockchain testnet - free, immutable, and impossible to sinkhole. https://intel.threadlinqs.com/threat/TL-2026-3919 #ThreatIntel #SectopRAT #ACR #ClearFake

DPRK's InvisibleFerret now ships as compiled Cython modules - script-only detection will miss it. https://intel.threadlinqs.com/threat/TL-2026-3920 #ThreatIntel #BeaverTail #InvisibleFerret #OtterCookie

UNC5820 turns a FortiOS CLI traversal bug into root, then hides PEERSTITCH in firewall daemons. https://intel.threadlinqs.com/threat/TL-2026-3921 #ThreatIntel #CVE_2025_61624 #CVE_2024_47575 #PEERSTITCH

Tortoiseshell hides TWOSTROKE and a reverse SSH tunnel inside a fake wtsapi32.dll. https://intel.threadlinqs.com/threat/TL-2026-3923 #ThreatIntel #LIGHTRAIL #MINIBIKE #MiniJunk

Time to take a break

Enjoy your break!