#threatintelligence

ifin.network

Rust Package Maintainers Targeted with Social Engineering, Repo Takeover

Last Updated: 2026-09-18T12:35:00Z (UTC) What’s Happening According to the Rust language security response working group, maintainers of rust-lang (the repo comprising the Rust language itself) and popular packages (crates) are being targeted by social engineering attacks intended to compromise the repository. Per the post: A video call is set up for something positive — maybe for a job, maybe for a project, maybe for a contract opportunity — and then that’s used as a vector to either g...

alecmuffett.com

UK agency makes arrest in airport cybercrime probe | The Register | IT WAS A 40-SOMETHING YEAR OLD GUY IN A BASEMENT IN WEST SUSSEX

Your regular reminder that all of the threat intelligence and attribution and SOCs and IOCs in the entire world, will not stop a motivated nerd in a basement: Officers from the UK’s National …

ifin-intel.org

Announcing IFIN Lists | IFIN

IFIN Lists is a project to build a well curated, community driven set of permanent block lists for all to use.

ifin.network

QuickFix: Yet Another Bring-Your-Own-Python Payload

Last Updated: 2026-09-16T14:53:57Z (UTC) What’s Happening TL;DR: `fileupdates.blob.core.windows[.]net is hosting “QuickFix,”, a new-ish installer file with PowerShell that installs its own Python interpreter, then activates a light C2 beacon for Python commands send via JSON. The detection opportunity is Python executing outside of expected directories. This was a tip from Fedi and turned into a really fun investigation. The tipper was surprised that Microsoft even allowed that blob storage...

github.com

GitHub - yeti-platform/yeti: Your Everyday Threat Intelligence

Your Everyday Threat Intelligence. Contribute to yeti-platform/yeti development by creating an account on GitHub.

rhisac.pulse.ly

RH-ISAC Membership Benefits Overview - RH-ISAC

Join RH-ISAC for a group call to learn more about our sharing community! RH-ISAC members share real-time cyber intelligence on incidents, threats, vulnerabilities, and threat remediation from more than 5,000 analysts, threat hunters and security engineers.

inferlume.com

When Mail Gateways And Identity Brokers Failed Open — Nightwatch \| Inferlume

Supply chains, AI agents, and Microsofts patch record all broke in the same week - Presented by Inferlume's weekly cyber threat intelligence roundup covering the top attack vectors, threat actors, and...

ifin-intel.org

What do you see? | IFIN

IFIN, the Independent Federated Intelligence Network, is here to make threat intelligence an act of mutual aid. Build the human network with us.

oskaresearch.com

Corporate OSINT investigations, online due diligence, reputation management, AI sentiment tools

Oskaresearch delivers corporate OSINT investigations, online due diligence and AI-sentiment analysis tools. Empowering your business to make informed decisions.

blog.lumen.com

The J-Magic Show: Magic Packets and Where to find them

A backdoor tailored to Juniper routers that hides the activation signal in regular traffic using “Magic Packets” to give access to an attacker