#Threat-intelligencePosts

All cybersecurity articles tagged with #threat-intelligence from the MINE2 expert team.

13 Posts

Tag: #Threat-intelligence

THREAT INTELLIGENCEAPR 10, 2026• 11 min read

One Token, Dozens of Victims: How the Anodot SaaS Integration Breach Rewrites the Third-Party Risk Playbook

ShinyHunters breached Anodot — a single SaaS analytics integration provider — and used stolen OAuth authentication...

mine2 team

→

THREAT INTELLIGENCEAPR 9, 2026• 14 min read

13 Million Tickets, One Request: How the Adobe BPO Breach Exposes the Third-Party Credential Blind Spot

A threat actor known as Mr. Raccoon allegedly walked into Adobe's support ticketing system through an Indian BPO...

mine2 team

→

THREAT INTELLIGENCEAPR 8, 2026• 11 min read

18,000 Routers, 120 Countries: How APT28's DNS Hijacking Campaign Renders Your M365 Credentials Worthless

Russia's GRU-backed APT28 (Forest Blizzard) compromised 18,000 SOHO routers across 120 countries to silently intercept...

mine2 team

→

THREAT INTELLIGENCEAPR 7, 2026• 12 min read

100 Million Downloads, One Poisoned Package: How the Axios npm Attack Proves Developer Credentials Are the New Crown Jewels

In a three-hour window on March 31, 2026, North Korean threat actor UNC1069 poisoned the Axios npm package — present in...

mine2 team

→

THREAT INTELLIGENCEAPR 6, 2026• 13 min read

Cisco IMC CVSS 9.8 Authentication Bypass: When Attackers Own Your Hardware and EDR Sees Nothing

CVE-2026-20093 allows unauthenticated attackers to seize full hardware-level control of Cisco UCS servers — bypassing...

mine2 team

→

THREAT INTELLIGENCEAPR 6, 2026• 12 min read

React2Shell CVE-2025-55182: 766 Next.js Hosts Breached in Automated Credential-Theft Wave

A CVSS 10.0 pre-auth RCE vulnerability in React Server Components has enabled an automated campaign to compromise 766...

mine2 team

→

THREAT INTELLIGENCEAPR 5, 2026• 14 min read

Device Code Phishing Hits 340+ Microsoft 365 Orgs: Why Cloud Mines Are Your Last Line of Defense

A sophisticated OAuth device code phishing campaign has compromised 340+ Microsoft 365 organisations across five...

mine2 team

→

THREAT INTELLIGENCEAPR 3, 2026• 12 min read

Kerberoasting in April 2026: Why CVE-2026-20833 Enforcement Is Not Enough Without AD Mines

Microsoft's April 2026 RC4 enforcement for CVE-2026-20833 eliminates the weakest Kerberoasting cipher — but 78% of...

mine2 team

→

THREAT INTELLIGENCEAPR 2, 2026• 12 min read

The Service Account Blind Spot: How FortiGate Intrusions Expose the Lateral Movement Crisis

SentinelOne's analysis of March 2026 FortiGate intrusions reveals a brutal playbook: attackers decrypt service account...

mine2 team

→

THREAT INTELLIGENCEMAR 29, 2026• 14 min read

The Infostealer Epidemic: 642 Million Stolen Credentials Are Already Inside Your Enterprise

SpyCloud's 2026 Identity Exposure Report reveals 642.4 million exposed credentials harvested from 13.2 million...

mine2 team

→

THREAT INTELLIGENCEMAR 27, 2026• 14 min read

When Defenders' Tools Become Attack Vectors: The Management Platform Exploitation Crisis

CVE-2026-22719 in VMware Aria Operations hit CISA's KEV catalog in March 2026 — one entry in a growing catalog of...

mine2 team

→

THREAT INTELLIGENCEMAR 9, 2026• 6 min read

The Rise of the Digital Parasite: Why 82% of Cyberattacks Are Now Malware-Free

CrowdStrike's 2026 Global Threat Report reveals 82% of detections are malware-free. Attackers use stolen credentials...

mine2 team

→

ZERO DAY VULNERABILITIESNOV 12, 2025• 4 min read

How to Safeguard Against Zero-Days: Lessons from Gladinet Triofox CVE-2025-12480

UNC6485 exploited CVE-2025-12480 in Gladinet Triofox to gain SYSTEM-level access by weaponizing the antivirus feature....

mine2 team

→

Ready to Secure Your Network?

Transform your cybersecurity posture with MINE2's advanced cyber deception platform. Detect threats before they become breaches.

Get Live Demo Contact Sales