Threat actor analysis, TTPs, IOCs, malware observations, advisory-style writeups, campaign summaries, OSINT findings, and defensive implications.
Threat Intel
Format: operator advisory (lab-note, evidence-first) Pillar: Threat Intel / Remote-access appliances Synthesis date: 2026-10-19 Cross-link: SMA1000 CVE-2026-15409 / 15410 active exploitation (July wave) The recurring pattern, in one paragraph The SMA1000 is a remote-access appliance. It sits on the internet edge and carries
Threat Intel
This note maps three runc container-escape CVEs disclosed together on November 5, 2025: the maskedPaths symlink bypass, the /dev/console mount race, and the LSM label write redirect. Chained they reach host root; patched individually they leave gaps for homelab distros.
Threat Intel
IronWorm is not an incremental improvement on the Shai-Hulud family of npm worms. It is a deliberate engineering escalation that makes several defenses: token rotation, 2FA-enforced publish workflows, provenance signatures, and even kernel-level attestation.
Threat Intel
A second shadow-MMU escape in a month: Zapscape (CVE-2026-64561) lets a nested guest reach host root on an unpatched KVM. If you rebooted for Januscape, check the booted kernel again — separate bug, separate fix.
Threat Intel
Lazarus Group's Operation Dream Job Wave 3: fake recruiter lures, two infection chains, the FudModule v3.1 kernel rootkit, and the CVE-2026-68820 AFD.sys zero-day. Includes tiered detection guidance.
Threat Intel
CVE-2026-64849 makes it possible against any MLflow tracking server that anyone can reach: a single unauthenticated HTTP request makes the server fetch the metadata endpoint for you and return the body.
cve-2026-59310
A five-day exploitation window, a reverse SSH backdoor, and a patch that closes the front door while the channel stays open. The vCenter triage.
litellm
An unauthenticated pre-auth SQL injection in the LiteLLM AI gateway, fixed in 1.83.7 and exploited in the wild 36 hours after the global advisory. The AI gateway is the perimeter device of the self-hosted AI stack — here is the triage, the forensics, and the standing posture.
homelab
A 20 GB GGUF from a trusted repo is not a download - it is code doing work. The lab note: why a clean build floor did not close the two open llama.cpp GGUF-parser flaws, and the no-egress intake/loader split that makes the file just a file again.
Threat Intel
Zimbra 10.1.x below 10.1.20 with the optional zimbra-snmp package and snmp_notify enabled is directly exploitable - CERT Polska confirms an ongoing in-the-wild campaign, the CISA KEV remediation due date has passed, and the observed persistence is JSP web shells in Jetty webapps.
homelab
CVE-2026-65400 is a pre-auth root in macOS Screen Sharing's screensharingd, actively exploited and rescored 7.1 to 9.8. The patch is out, but the forgotten 5900 forward is the exposure: patch the Mac, verify nothing else can reach port 5900, and if it can, treat the box as compromised.
self-hosting
Copy Fail (CVE-2026-31431) lets any local user write 4 bytes into the page cache of any readable file, and one 732-byte script turns that into root. Container isolation never touched the page cache: rootless Podman stops the root, not the poisoned binary your other containers execute.