#threatintel

Eight intermediate certificates used by eMudhra/Emsign have been compromised. These certificates are in multiple trust stores. This will require significant manual action to remediate, including the updates of several packages.

https://ifin.network/t/emudhra-intermediate-certificates-compromised/909

#ThreatIntel #ThreatIntelligence #IFIN

Week of October 16, 2026 consolidates critical RCE chains in Adobe, DNS infrastructure weaponization for wallet theft, NVIDIA container escape techniq#security #cybersecurity #news #threatintel #software #coding #development #engineering #inclusive #community
ThreatsDay Threat Cluster: Adobe RCE, DNS Wallet Theft, Container Escapes

I analyzed an Italian language phishing campaign that used a hidden iframe to deliver a WebKit exploit chain targeting iOS 13–17.2.1.

The article examines the exploit, C2 infrastructure, and IoCs: https://www.d3lab.net/an-italian-phishing-campaign-delivering-an-ios-exploit-chain/

#iOS #ThreatIntel #Malware

🚨 #ShinyHunters recruiting for vishing ops?

A Telegram post linked to the group offers $500–$1000 per scripted call targeting helpdesks, suggesting structured social-engineering/initial access activity.
The human layer remains a key attack surface.

#Vishing #CTI #ThreatIntel

Nuova campagna phishing 🇮🇹 contro utenti #Binance!

C2 attivo, exfil via Telegram, fake SOW/AML.

✅ 168 casi (2025 YTD)
🔗 Analisi: https://www.d3lab.net/cresce-il-phishing-ai-danni-di-binance-analisi-di-una-campagna-ben-congegnata/

#ThreatIntel #Phishing #CryptoThreats #Cybersecurity