rdintel/news

trending threats

rdintel.com →

topics

bug-bounty

1344 exploit

839 google

758 microsoft

702 xss

635 rce

571 malware

541 cve

524 facebook

470 apple

376 writeup

313 supply-chain

273 node

222 account-takeover

207 web3

194 phishing

191 browser

188 cloud

185 dos

177 aws

175 reverse-engineering

160 cloudflare

158 csrf

157 sqli

156 ssrf

147

trending now

quality: all 6+ 8+

Claude wrote a full FreeBSD remote kernel RCE with root shell

cve rce writeup

github.com · ishqdehlvi· 1 day ago · research · details · hn 258

Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)

buffer-overflow cve docker exploit rce writeup CVE-2026-4747 · 37

blog.calif.io · wglb· 11 hours ago · 9 min · research · details · hn 2

Burp-Only IDOR Hunting — Find Broken Authorization Without Fancy Tools

bug-bounty idor

medium.com · ghostyjoe· 10 hours ago · research · details

Hackers exploit TrueConf zero-day to push malicious software updates

cve exploit google malware microsoft node privilege-escalation CVE-2026-3502 · 34

bleepingcomputer.com · Bill Toulas· 12 hours ago · 5 min · research · details

Exploiting a 32-year-old buffer overflow in GNU telnetd (CVE-2026-32746)

buffer-overflow cve exploit rce CVE-2026-32746 · 48

striga.ai · traekfuglene· 21 hours ago · 19 min · research · details · hn 6

One Mobile Number = Full Wishlist Takeover (No Authentication Required)

bug-bounty

medium.com · Aya Ayman(GERR4Y)· 14 hours ago · research · details

Top NPM package backdoored to drop dirty RAT on dev machines

apple browser google malware microsoft node supply-chain wordpress

theregister.com · Bender· 19 hours ago · 8 min · news · details · hn 3

Predatorgate: Breaking the chain of impunity of the spyware underworld

spyware chain-of-impunity underworld

edri.org · jruohonen· 18 hours ago · 11 min · research · details · hn 2

Axios NPM Supply Chain Attack: Malicious Update Enables Remote Access

node supply-chain

blog.securelayer7.net · securelayer7· 15 hours ago · news · details

If Your AI Agent Ran NPM Install During the Axios Attack, You're Compromised

apple malware microsoft node supply-chain

grith.ai · edf13· 1 day ago · 12 min · research · details · hn 5

this feed is available as an API

GET /api/v1/news/?min_rating=7&days=1

docs → mcp server →

AI Agent Security: What SoC 2, ISO 27001, and HIPAA Mean in Production

microsoft

simplai.ai · Shanmugaraj-1· 20 hours ago · 15 min · research · details · hn 2

CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails

malware phishing

thehackernews.com · [email protected] (The Hacker News)· 18 hours ago · research · details

I created one of the most complex eBPF project with Claude/Cursor

ebpf complexity project

github.com · SilverPlate3· 22 hours ago · 5 min · tutorial · details · hn 2

North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

supply-chain nmap malware

cloud.google.com · digicat· 1 day ago · 17 min · news · details

7,655 Ransomware Claims in One Year: Group, Sector, and Country Breakdown

malware supply-chain

ciphercue.com · adulion· 2 days ago · 8 min · news · details · hn 61

Acrionix Shield – Zero-dep security scanner for 7 languages

acronix-shield security-scanner languages

github.com · andrei-gogo· 23 hours ago · 4 min · tool · details · hn 2

Axios npm package compromised in supply chain attack. Downloads malware dropper package

malware node supply-chain

thecybersecguru.com · raptorhunter22· 2 days ago · news · details

windbg-mcp: An MCP (Model Context Protocol) server that turns all pybag Windows debugger functions into native MCP tools. It lets MCP-compatible clients (Claude Desktop, Claude Code, Cowork, OpenAI Codex CLI, Cursor, and custom agents) control user-mode processes, kernel sessions, and crash dump etc

microsoft

github.com · digicat· 1 day ago · 23 min · tool · details

I reverse engineered the Govee H8630 smart display: UART shell, hardcoded AES keys, and MQTT control.

reverse-engineering

blog.kulkan.com · Dr-Shataaz· 1 day ago · research · details

From Key to Chaos: How a JS Key Breaks Notification Security

auth-bypass bug-bounty

medium.com · Rushikesh Kaware· 20 hours ago · research · details

axios 1.14.1 and 0.30.4 on npm are compromised - dependency injection via stolen maintainer account

account-takeover node supply-chain

safedep.io · BattleRemote3157· 2 days ago · news · details

What the Claude Code Leak Teaches Us About AI Supply-Chain Security

bug-bounty supply-chain

medium.com · Umang Mishra· 21 hours ago · 10 min · research · details

Casbaneiro Phishing Targets Latin America and Europe Using Dynamic PDF Lures

malware microsoft phishing

thehackernews.com · [email protected] (The Hacker News)· 21 hours ago · research · details

New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released

buffer-overflow cve google CVE-2026-5281 · 61

thehackernews.com · [email protected] (The Hacker News)· 22 hours ago · research · details

ImageMagick: From Arbitrary File Read to File Write In Every Policy (ZeroDay)

apple aws cloud docker exploit google pentest rce wordpress

pwn.ai · _vavkamil_· 1 day ago · 27 min · research · details

CVE-2026–24018: A Logic flaw to Local Privilege Escalation 0day $$$

logic-flaw local-privilege-escalation security-bug CVE-2026-24018 · 34

febinj.medium.com · Febin· 1 day ago · research · details

Quick write-up: TLS callbacks in a real malware sample (Rust runtime initialization)

exploit malware microsoft writeup

mja-reversing.github.io · MalRE429· 1 day ago · 7 min · writeup · details

Intigriti March 2026 XSS Challenge Writeup: Chaining 3 Bypasses to Steal Admin Cookies

xss intigriti challenge steal-admin-cookies

infosecwriteups.com · Mrunal chawda· 1 day ago · writeup · details

GitHub is a Search Engine for Secrets — and Nobody Told You

github secrets

infosecwriteups.com · Shah kaif· 1 day ago · 9 min · research · details

A laughing RAT: CrystalX combines spyware, stealer, and prankware features

google malware microsoft osint phishing websocket

securelist.com · GReAT· 1 day ago · 12 min · tool · details

page 1 of 14

news.rdintel.com · api · mcp · rdintel.com