#ThreatIntel is an active hashtag on Bluesky. In the last 30 days, 61 people shared 2,275 posts with it — around 76 a day. Activity is down 11% versus the previous week, peaking on Sep 15 with 118 posts.
Tags most often used together with #ThreatIntel.
www.volexity.com
The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access
In early February 2022, notably just ahead of the Russian invasion of Ukraine, Volexity made a discovery that led to one of the most fascinating and complex incident investigations Volexity had ever w...
media.tenor.com
two men are standing next to each other with the words " we open it up " on the screen
ALT: two men are standing next to each other with the words " we open it up " on the screen
www.volexity.com
Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication
Starting in mid-January 2025, Volexity identified several social-engineering and spear-phishing campaigns by Russian threat actors aimed at compromising Microsoft 365 (M365) accounts. These attack cam...
ifin.network
Rust Package Maintainers Targeted with Social Engineering, Repo Takeover
Last Updated: 2026-09-18T12:35:00Z (UTC) What’s Happening According to the Rust language security response working group, maintainers of rust-lang (the repo comprising the Rust language itself) and popular packages (crates) are being targeted by social engineering attacks intended to compromise the repository. Per the post: A video call is set up for something positive — maybe for a job, maybe for a project, maybe for a contract opportunity — and then that’s used as a vector to either g...
rationaledge.io
RationalEdge - Intelligence Meets Accuracy
Advanced malware analysis and threat intelligence solutions by RationalEdge
cyberthreatintelligence.net
U.S. Electrical Services and Wiedenbach Brown — Ransomware Attack by Moneymessage
Energy & Utilities sector. Disclosed 21 Sep 2026. Incident profile, threat group background and sector analysis.
www.scworld.com
New ‘Plugin4Shell’ vulnerability affects major AI coding agents
The exploit targets trusted plugin marketplaces used by AI coding agents such as Anthropic's Claude Code, OpenAI's Codex, Google's Gemini CLI, and Microsoft's Copilot.
www.csoonline.com
New npm malware finds a way around install script defenses
A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.
cyberthreatintelligence.net
Bruker Corporation — Ransomware Attack by Metaencryptor
Based in United States. Manufacturing sector. Disclosed 21 Sep 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
Flex Ltd — Ransomware Attack by Metaencryptor
Based in United States. Manufacturing sector. Disclosed 21 Sep 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
Hudson MD Group, LLC — Ransomware Attack by Metaencryptor
Based in United States. Healthcare sector. Disclosed 21 Sep 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
HyVision System. Inc — Ransomware Attack by Metaencryptor
Based in South Korea. Technology sector. Disclosed 21 Sep 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
Visual Intelligence, Inc. — Ransomware Attack by Metaencryptor
Based in United States. Technology sector. Disclosed 21 Sep 2026. Incident profile, threat group background and sector analysis.
www.lawfaremedia.org
After the Flood: Moving Beyond the U.S. Vulnerabilities Equities Process
The oncoming AI-driven flood of vulnerabilities demands changes to the U.S. process for retaining them for offensive cyber operations.
Posts are pulled live from Bluesky and cached briefly. Posts with content labels are hidden.