Joined February 2026
603 Photos and videos
Pinned Tweet
The all-new command center is live. Faster. Sharper. One place to detect, simulate, correlate & automate. Some of the new features: - Full redesign and brand new UI/UX - AI assisted search - Direct MCP chat with live data via the research_lab - TLQL search query language - Your own personalized feeds notifications - New Command Center and Briefing views - And much more ... → intel.threadlinqs.com
1
335
Phishing volume dropped 20% but it got deadlier: AI builds the lure, AiTM kits steal your live session past MFA. intel.threadlinqs.com/threat… #ThreatIntel #Phishing
5
Ivanti Sentry: one unauthenticated POST and you are root. CISA KEV, mass-exploited a day after PoC. Patch now. intel.threadlinqs.com/threat… #ThreatIntel #CVE
14
Fake VRChat and Discord breaches hit Maine's official portal - no data stolen, just zero verification. 9 detections, 18 IOCs. intel.threadlinqs.com/threat… #ThreatIntel #InfoSec
19
Cops just unplugged ransomware's favorite laundromat - AudiA6 cleaned crypto in under an hour for a cut. 9 detections, 35 IOCs. intel.threadlinqs.com/threat… #ThreatIntel #InfoSec
6
No malware needed - attackers ship a real NinjaOne RMM agent as a fake tax doc to own Brazilian firms. 9 detections, 21 IOCs. intel.threadlinqs.com/threat… #ThreatIntel #Malware
24
A decade-old phpBB bug lets one unauthenticated request log you in as any user - even admins. Patch to 3.3.17 now. intel.threadlinqs.com/threat… #ThreatIntel #CVE
20
Adopt an abandoned Arch package, ship a Rust stealer eBPF rootkit. 400 AUR pkgs hijacked - rebuild the host. intel.threadlinqs.com/threat… #ThreatIntel #SupplyChain
21
FBI and Google just gutted a $88/week phishing shop that taught crooks to make Gemini write the fake pages. intel.threadlinqs.com/threat… #ThreatIntel #Phishing
10
Splunk's Postgres sidecar trusts the DB for auth - so a pre-auth chain turns your SIEM into RCE. 9 detections, 17 IOCs. intel.threadlinqs.com/threat… #ThreatIntel #CVE
34
Conti malware dev caught asleep next to a laptop running live Cobalt Strike - now pleads guilty, faces 20 years. intel.threadlinqs.com/threat… #ThreatIntel #Ransomware
31
APT36's SHEETCREEP RAT runs its entire C2 inside a Google Sheet - commands in column A, stolen data in column B. intel.threadlinqs.com/threat… #ThreatIntel #Malware
1
1
74
OnyxC2 rents enterprise-grade theft for $250/mo - one host gave up 55 passwords and 4,717 cookies. 9 detections, 25 IOCs. intel.threadlinqs.com/threat… #ThreatIntel #Malware
16
400 Arch AUR packages were backdoored to drop a Linux stealer that hides behind an eBPF rootkit. 9 detections, 29 IOCs. intel.threadlinqs.com/threat… #ThreatIntel #SupplyChain
27
ShinyHunters turned an Oracle PeopleSoft 0-day into a full takeover - 100 orgs breached, most of them universities. intel.threadlinqs.com/threat… #ThreatIntel #CVE
81
Open an email in Exchange OWA and attacker JS runs in your session - no login, no patch for weeks. CVE-2026-42897 is live. intel.threadlinqs.com/threat… #ThreatIntel #CVE
60
One unsanitized filter key chains SQLi to full RCE in LangGraph's agent checkpointer - patch now. 9 detections, 18 IOCs. intel.threadlinqs.com/threat… #ThreatIntel #CVE
45
APT-C-60 hides SpyGlace behind the signed Git binary - a VHDX resume mounts, gcmd.exe runs the dropper, app-control never blinks. intel.threadlinqs.com/threat… #ThreatIntel
30
The wormable RDP bug everyone feared is finally live - BlueKeep now drops Monero miners, when it doesnt just BSOD the box. intel.threadlinqs.com/threat… #ThreatIntel #CVE
62
Attackers didn't need a 0-day - just your exposed RDP port. Same open surface, breached twice in one morning. intel.threadlinqs.com/threat… #ThreatIntel #InfoSec
36
A verified, well-reviewed Steam game turned malicious in a patch - draining wallets while the AV sat blinded. intel.threadlinqs.com/threat… #ThreatIntel #SupplyChain
31