ThreadLinqs

The Unified Security Engineering and Intelligence platform

[ThreadLinqs @threadlinqs]

There has been a lot of hype behind Opus 5.5 and it ability to generate videos, so we took a shot at it to contrast our gathered intel <1year against the 43 case studies of AI misuse published by Anthropic: https://t.co/ufvCW6gvc1
#AImisuse #Anthropic #Threadlinqs #Opus5

[ThreadLinqs @threadlinqs]

Public Metasploit modules now hit Langflow - attackers are already stealing OpenAI and AWS keys. https://t.co/qHww5uARFN #ThreatIntel #CVE_2026_93680 #CVE_2026_7873 #Python

[ThreadLinqs @threadlinqs]

Okta Access Gateway admin console flaw turns config values into system commands. No workaround - patch. https://t.co/N3lxCmjk59 #ThreatIntel #CVE_2026_115547

[ThreadLinqs @threadlinqs]

Node2Shell: a crafted Brotli stream turns Node.js body-parser and fetch() into a path to RCE. https://t.co/eSQeF1iAru #ThreatIntel #CVE_2026_111497 #Node2Shell #ZLib

[ThreadLinqs @threadlinqs]

Ransomware hit Curacao's tax office while shared court IT went dark across the Dutch Caribbean. https://t.co/mpAEBJkp2o #ThreatIntel #Curaao #Dutch #Ransomware

[ThreadLinqs @threadlinqs]

StealC is back as Stadia: a RAT with hidden-desktop control and the same ABE browser-theft code. https://t.co/UOOz4mqRZy #ThreatIntel #Stadia #Stealc #plymouth

[ThreadLinqs @threadlinqs]

Capcom's account service was breached - leaked emails and login IPs now fuel Capcom-themed phishing. https://t.co/Zczmo10XJo #ThreatIntel #CAPCOM

[ThreadLinqs @threadlinqs]

Unauthenticated RCE and auth bypass hit Aruba wireless controllers at CVSS 10.0 - lock down mgmt access. https://t.co/c7fGwvZ6oH #ThreatIntel #CVE_2026_79844 #CVE_2026_79845 #hpesbnw05162en_us

[ThreadLinqs @threadlinqs]

Unauthenticated SSH bypass in Aruba AOS-8 hands attackers admin on wireless controllers. Patch now. https://t.co/hrdkdX1fFt #ThreatIntel #CVE_2026_79855 #HPESBNW05162

[ThreadLinqs @threadlinqs]

PHP2Shell RCE is under mass attack, and PHP just warned of another unpatched RCE two days later. https://t.co/ZmH00Xw3SV #ThreatIntel #CVE_2026_115560 #CVE_2026_109618 #Mirai

[ThreadLinqs @threadlinqs]

A 5060 Siege: curated SIP password dictionaries and IRSF toll-fraud calls are hammering exposed PBXs. https://t.co/1xVXoI86AK #ThreatIntel #Mevade

[ThreadLinqs @threadlinqs]

A malicious PR can dump CI runner memory and walk off with your repo write token. https://t.co/aC206nIU7J #ThreatIntel #CVE_2025_8217 #CVE_2025_30066 #ChainDrop

[ThreadLinqs @threadlinqs]

x402 SDK flaws let a rogue API drain AI agent wallets - no spend cap by default. https://t.co/ReeTe8YoIo #ThreatIntel #Python #x402

[ThreadLinqs @threadlinqs]

PHP2Shell RCE, a backdoored LiteLLM and GlobalProtect MFA bypass all hit defenders at once. https://t.co/Qo0g7CveX2 #ThreatIntel #CVE_2026_109618 #CVE_2026_109619 #PHP

[ThreadLinqs @threadlinqs]

Oracle's October CPU lands four unauthenticated CVSS 10 Fusion Middleware bugs - block T3/IIOP now. https://t.co/xJ5gYgeSe4 #ThreatIntel #CVE_2026_87337 #CVE_2026_91216 #Oracle

[ThreadLinqs @threadlinqs]

CGM CLININET hospital software: unauth patient docs and multiple paths to root RCE. https://t.co/fvmrzBWU73 #ThreatIntel #CVE_2025_30043 #CVE_2025_30045

[ThreadLinqs @threadlinqs]

Claude audited 25 OSS projects: hostname deny rules fail open and experimental sshd code ran pre-auth. https://t.co/qelurKrTLn #ThreatIntel #OSS #Claude #Attack

[ThreadLinqs @threadlinqs]

Cisco Expressway clusters can be rooted by an unauthenticated RPC call - and there is no workaround. https://t.co/eolLgdGdCR #ThreatIntel #CVE_2026_76466 #CVE_2026_76473

[ThreadLinqs @threadlinqs]

Atlassian's '::' traversal leaks Crowd creds, exploited 2 hours after PoC. Now in CISA KEV. https://t.co/WJp9QYe7eU #ThreatIntel #CVE_2026_65637 #CVE_2026_58062 #Nuclei

[ThreadLinqs @threadlinqs]

Cisco patches 13 Snort 3 flaws - crash the IPS engine and traffic may slip through uninspected. https://t.co/DMER0wXKhj #ThreatIntel #CVE_2026_20011 #CVE_2026_20019 #NCSC20260450

[ThreadLinqs @threadlinqs]

ZDI leaked unpatched Linux KSMBD pre-auth RCEs and a root LPE on public lists - no CVEs, no fixes. https://t.co/YnKzxNqIYn #ThreatIntel #ZDICAN33774 #ZDICAN33549 #ZDICAN33367