rdintel/news

trending threats

rdintel.com →

topics

bug-bounty

1011 exploit

681 microsoft

654 google

634 malware

530 cve

494 rce

481 facebook

350 apple

333 xss

311 supply-chain

270 writeup

231 node

212 phishing

183 cloud

169 account-takeover

168 aws

158 reverse-engineering

154 dos

152 browser

151 docker

131 privilege-escalation

121 cloudflare

120 pentest

120 lfi

116

new & best

quality: all 6+ 8+

Burp-Only IDOR Hunting — Find Broken Authorization Without Fancy Tools

bug-bounty idor

medium.com · ghostyjoe· 12 hours ago · research · details

Hackers exploit TrueConf zero-day to push malicious software updates

cve exploit google malware microsoft node privilege-escalation CVE-2026-3502 · 34

bleepingcomputer.com · Bill Toulas· 14 hours ago · 5 min · research · details

One Mobile Number = Full Wishlist Takeover (No Authentication Required)

bug-bounty

medium.com · Aya Ayman(GERR4Y)· 15 hours ago · research · details

Axios NPM Supply Chain Attack: Malicious Update Enables Remote Access

node supply-chain

blog.securelayer7.net · securelayer7· 17 hours ago · news · details

Predatorgate: Breaking the chain of impunity of the spyware underworld

spyware chain-of-impunity underworld

edri.org · jruohonen· 19 hours ago · 11 min · research · details · hn 2

CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails

malware phishing

thehackernews.com · [email protected] (The Hacker News)· 19 hours ago · research · details

Top NPM package backdoored to drop dirty RAT on dev machines

apple browser google malware microsoft node supply-chain wordpress

theregister.com · Bender· 21 hours ago · 8 min · news · details · hn 3

AI Agent Security: What SoC 2, ISO 27001, and HIPAA Mean in Production

microsoft

simplai.ai · Shanmugaraj-1· 22 hours ago · 15 min · research · details · hn 2

From Key to Chaos: How a JS Key Breaks Notification Security

auth-bypass bug-bounty

medium.com · Rushikesh Kaware· 22 hours ago · research · details

What the Claude Code Leak Teaches Us About AI Supply-Chain Security

bug-bounty supply-chain

medium.com · Umang Mishra· 23 hours ago · 10 min · research · details

this feed is available as an API

GET /api/v1/news/?min_rating=7&days=1

docs → mcp server →

Exploiting a 32-year-old buffer overflow in GNU telnetd (CVE-2026-32746)

buffer-overflow cve exploit rce CVE-2026-32746 · 48

striga.ai · traekfuglene· 23 hours ago · 19 min · research · details · hn 6

I created one of the most complex eBPF project with Claude/Cursor

ebpf complexity project

github.com · SilverPlate3· 23 hours ago · 5 min · tutorial · details · hn 2

Casbaneiro Phishing Targets Latin America and Europe Using Dynamic PDF Lures

malware microsoft phishing

thehackernews.com · [email protected] (The Hacker News)· 23 hours ago · research · details

New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released

buffer-overflow cve google CVE-2026-5281 · 62

thehackernews.com · [email protected] (The Hacker News)· 1 day ago · research · details

Acrionix Shield – Zero-dep security scanner for 7 languages

acronix-shield security-scanner languages

github.com · andrei-gogo· 1 day ago · 4 min · tool · details · hn 2

If Your AI Agent Ran NPM Install During the Axios Attack, You're Compromised

apple malware microsoft node supply-chain

grith.ai · edf13· 1 day ago · 12 min · research · details · hn 5

windbg-mcp: An MCP (Model Context Protocol) server that turns all pybag Windows debugger functions into native MCP tools. It lets MCP-compatible clients (Claude Desktop, Claude Code, Cowork, OpenAI Codex CLI, Cursor, and custom agents) control user-mode processes, kernel sessions, and crash dump etc

microsoft

github.com · digicat· 1 day ago · 23 min · tool · details

North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

supply-chain nmap malware

cloud.google.com · digicat· 1 day ago · 17 min · news · details

CVE-2026–24018: A Logic flaw to Local Privilege Escalation 0day $$$

logic-flaw local-privilege-escalation security-bug CVE-2026-24018 · 34

febinj.medium.com · Febin· 1 day ago · research · details

Mad Bugs: Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell

kernel-exploitation root-shell CVE-2026-4747 · 38

blog.calif.io · dnqthao· 1 day ago · 9 min · research · details · hn 2

A laughing RAT: CrystalX combines spyware, stealer, and prankware features

google malware microsoft osint phishing websocket

securelist.com · GReAT· 1 day ago · 12 min · tool · details

GitHub is a Search Engine for Secrets — and Nobody Told You

github secrets

infosecwriteups.com · Shah kaif· 1 day ago · 9 min · research · details

Intigriti March 2026 XSS Challenge Writeup: Chaining 3 Bypasses to Steal Admin Cookies

xss intigriti challenge steal-admin-cookies

infosecwriteups.com · Mrunal chawda· 1 day ago · writeup · details

Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms

node

thehackernews.com · [email protected] (The Hacker News)· 1 day ago · research · details

How I Achieved a “Critical Hit” on a Bug Bounty Platform: Bypassing OTP via Response Manipulation

bug-bounty

evangeliux.medium.com · Evangeliux· 1 day ago · tutorial · details

Security vulnerabilities in popular MCP servers (auth bypass, RCE, API keys)

mcp security-vulnerabilities server CVE-2026-4747 · 38

old.reddit.com · politelemon· 1 day ago · 8 min · vulnerability · details · hn 1

You Cannot Hack What You Cannot See—Mapping the Full Attack Surface with Burp Suite

bug-bounty osint

osintteam.blog · Yamini Yadav_369· 1 day ago · research · details

From Dependency to Domain Compromise: How One Install Can Take Down Everything

bug-bounty

medium.com · Paritosh· 1 day ago · 4 min · research · details

How I Found an IDOR That Exposed Cancer Patient Identities on a Government Healthcare Portal

bug-bounty idor writeup

medium.com · ABO3JRAM· 1 day ago · research · details

BCG's Data Warehouse Hacked – 3.17T Rows, Zero Authentication

data-warehouse hacking bcg

codewall.ai · theolivenbaum· 1 day ago · 9 min · news · details · hn 1

page 1 of 10

news.rdintel.com · api · mcp · rdintel.com