https://intel.threadlinqs.com/threat/TL-2026-0101/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-systembc-resurgence-botnet-tl-2026-0101.webp?v=4e45b82cSystemBC Resurgence With 10K+ Infections: Detection & IOCs — video…SystemBC is a multiplatform SOCKS5 proxy backdoor and malware-as-a-service (MaaS) platform active since August 2019, maintaining 80+ C2 servers with a daily…https://intel.threadlinqs.com/reel/threat/threat-intel-systembc-resurgence-botnet-tl-2026-0101.mp4?v=4e45b82c602026-10-20T17:28:25+00:00yes https://intel.threadlinqs.com/threat/TL-2026-0106/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-apt36-crimson-rat-campaign-tl-2026-0106.webp?v=807eb68cAPT36 Crimson RAT and CapraRAT: Detection & IOCs — video briefingAPT36/Transparent Tribe (Pakistan-nexus, ISI-linked) deploys Crimson RAT (.NET) and CapraRAT (Android) for persistent espionage against Indian military…https://intel.threadlinqs.com/reel/threat/threat-intel-apt36-crimson-rat-campaign-tl-2026-0106.mp4?v=807eb68c602026-10-20T19:45:39+00:00yes https://intel.threadlinqs.com/threat/TL-2026-0203/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-quicklens-shotbird-extension-hijack-tl-2026-0203.webp?v=794952cbQuickLens and ShotBird Chrome Extension Ownership Hijack — video…Threat actors acquired legitimate Chrome extensions QuickLens (~7,000 users) and ShotBird (~800 users) through marketplace ownership transfers, weaponizing…https://intel.threadlinqs.com/reel/threat/threat-intel-quicklens-shotbird-extension-hijack-tl-2026-0203.mp4?v=794952cb602026-10-20T18:08:14+00:00yes https://intel.threadlinqs.com/threat/TL-2026-0265/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-laravel-livewire-rce-tl-2026-0265.webp?v=37bb5283CVE-2025-54068 Livewire Synthesizer RCE: Detection & IOCs — video…Critical unauthenticated remote code execution vulnerability in Laravel Livewire v3 (CVE-2025-54068, CVSS 9.8) exploited via synthesizer smuggling during…https://intel.threadlinqs.com/reel/threat/threat-intel-laravel-livewire-rce-tl-2026-0265.mp4?v=37bb5283602026-10-20T20:26:08+00:00yes https://intel.threadlinqs.com/threat/TL-2026-0481/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-semantic-kernel-rce-chain-tl-2026-0481.webp?v=4f4365a7CVE-2026-26030 Semantic Kernel RCE: Detection & IOCs — video briefingTwo vendor-confirmed CRITICAL vulnerabilities (both CVSS 9.9, scope-changed) in Microsoft's Semantic Kernel — the AI agent orchestration SDK with 27.9k stars…https://intel.threadlinqs.com/reel/threat/threat-intel-semantic-kernel-rce-chain-tl-2026-0481.mp4?v=4f4365a7602026-10-20T17:17:26+00:00yes https://intel.threadlinqs.com/threat/TL-2026-0515/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-teampcp-cemu-backdoor-tl-2026-0515.webp?v=e8d4996cTeamPCP Backdoors Cemu v2.6 GitHub Release Assets — video briefingOn 7-8 May 2026, threat actor TeamPCP re-uploaded backdoored Linux assets (Cemu-2.6-x86_64.AppImage and Cemu-2.6-ubuntu-22.04-x64.zip) to the official…https://intel.threadlinqs.com/reel/threat/threat-intel-teampcp-cemu-backdoor-tl-2026-0515.mp4?v=e8d4996c602026-10-20T18:35:50+00:00yes https://intel.threadlinqs.com/threat/TL-2026-0545/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-may-2026-cisa-kev-batch-tl-2026-0545.webp?v=81887cf7May 2026 CISA KEV batch — video briefingOn May 20, 2026, CISA added seven vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active in-the-wild exploitation.…https://intel.threadlinqs.com/reel/threat/threat-intel-may-2026-cisa-kev-batch-tl-2026-0545.mp4?v=81887cf7602026-10-20T17:41:11+00:00yes https://intel.threadlinqs.com/threat/TL-2026-0648/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-fake-bluewallet-stealer-tl-2026-0648.webp?v=1641fa7aFake BlueWallet macOS Stealer via AppleScript Dropper — video briefingA fake site impersonating the legitimate BlueWallet Bitcoin wallet (update-bluewallet[.]com) social-engineers macOS users into opening a downloaded…https://intel.threadlinqs.com/reel/threat/threat-intel-fake-bluewallet-stealer-tl-2026-0648.mp4?v=1641fa7a602026-10-20T20:11:03+00:00yes https://intel.threadlinqs.com/threat/TL-2026-0650/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-ibm-websphere-plug-in-rce-tl-2026-0650.webp?v=7c737be0CVE-2026-8633 IBM WebSphere Plug-in RCE: Detection & IOCs — video…IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5 and 9.0 contain a critical unauthenticated remote code execution flaw…https://intel.threadlinqs.com/reel/threat/threat-intel-ibm-websphere-plug-in-rce-tl-2026-0650.mp4?v=7c737be0602026-10-20T19:56:45+00:00yes https://intel.threadlinqs.com/threat/TL-2026-0682/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-redis-use-after-free-rce-tl-2026-0682.webp?v=c827f1e2CVE-2026-23479 Authenticated Redis RCE: Detection & IOCs — video…An authenticated use-after-free (CWE-416) in Redis's unblock-client flow (unblockClientOnKey() in src/blocked.c) enables heap corruption that chains to remote…https://intel.threadlinqs.com/reel/threat/threat-intel-redis-use-after-free-rce-tl-2026-0682.mp4?v=c827f1e2602026-10-20T19:20:09+00:00yes https://intel.threadlinqs.com/threat/TL-2026-0688/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-cisco-unified-cm-webdialer-ssrf-tl-2026-0688.webp?v=d67bf31dCVE-2026-20230 Cisco Unified CM SSRF Chained to Root — video briefingCVE-2026-20230 is an unauthenticated server-side request forgery (SSRF) flaw in the Cisco Unified Communications Manager (Unified CM) and Session Management…https://intel.threadlinqs.com/reel/threat/threat-intel-cisco-unified-cm-webdialer-ssrf-tl-2026-0688.mp4?v=d67bf31d602026-10-20T18:27:31+00:00yes https://intel.threadlinqs.com/threat/TL-2026-0855/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-firefox-152-security-advisory-tl-2026-0855.webp?v=466333b3Firefox 152 security advisory — video briefingMozilla's MFSA 2026-57 advisory fixes 39 vulnerabilities in Firefox 152, including use-after-free, memory-safety/corruption, JIT miscompilation, and four…https://intel.threadlinqs.com/reel/threat/threat-intel-firefox-152-security-advisory-tl-2026-0855.mp4?v=466333b3602026-10-20T18:19:42+00:00yes https://intel.threadlinqs.com/threat/TL-2026-1083/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-jadepuffer-nacos-takeover-tl-2026-1083.webp?v=508e17c8JADEPUFFER End-to-End Attack: Detection & IOCs — video briefingAn LLM-driven autonomous agent, dubbed JADEPUFFER by Sysdig, exploited an unauthenticated Langflow RCE (CVE-2025-3248) to gain initial access, harvested…https://intel.threadlinqs.com/reel/threat/threat-intel-jadepuffer-nacos-takeover-tl-2026-1083.mp4?v=508e17c8602026-10-20T20:17:20+00:00yes https://intel.threadlinqs.com/threat/TL-2026-1117/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-jadepuffer-agentic-ransomware-tl-2026-1117.webp?v=2c717645JADEPUFFER Langflow-to-Nacos Pivot: Detection & IOCs — video briefingSysdig's Threat Research Team documented JADEPUFFER, assessed as the first fully autonomous, end-to-end agentic-AI-driven ransomware operation. An LLM-driven…https://intel.threadlinqs.com/reel/threat/threat-intel-jadepuffer-agentic-ransomware-tl-2026-1117.mp4?v=2c717645602026-10-20T19:37:48+00:00yes https://intel.threadlinqs.com/threat/TL-2026-1195/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-glitch-spy-rat-tl-2026-1195.webp?v=58c68431Glitch SPY Android RAT and Tutaj Dom Rental Lure — video briefingA new Android RAT dubbed Glitch SPY is being distributed via a fraudulent Polish apartment-rental website (tutaj-dompl[.]com) impersonating a platform called…https://intel.threadlinqs.com/reel/threat/threat-intel-glitch-spy-rat-tl-2026-1195.mp4?v=58c68431602026-10-20T17:49:17+00:00yes https://intel.threadlinqs.com/threat/TL-2026-1217/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-wiz-red-agent-airline-bola-tl-2026-1217.webp?v=a638edb6Wiz Red Agent Airline GraphQL BOLA: Detection & IOCs — video briefingWiz's autonomous AI red-team agent ("Red Agent") found a critical BOLA flaw in an unnamed airline's GraphQL booking API, gaining unauthenticated read/write…https://intel.threadlinqs.com/reel/threat/threat-intel-wiz-red-agent-airline-bola-tl-2026-1217.mp4?v=a638edb6602026-10-20T19:11:41+00:00yes https://intel.threadlinqs.com/threat/TL-2026-1227/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-systembc-droxidat-proxy-tl-2026-1227.webp?v=14f66d96SystemBC DroxiDat Multi-Purpose Proxy: Detection & IOCs — video…SystemBC (aka Coroxy, DroxiDat) is a Windows-only backdoor/RAT sold as malware-as-a-service that converts infected hosts into SOCKS5 (and, in newer variants…https://intel.threadlinqs.com/reel/threat/threat-intel-systembc-droxidat-proxy-tl-2026-1227.mp4?v=14f66d96602026-10-20T19:04:05+00:00yes https://intel.threadlinqs.com/threat/TL-2026-1477/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-ionstack-android-17-root-chain-tl-2026-1477.webp?v=01cfe03bCVE-2026-10702 IonStack Firefox-to-Root: Detection & IOCs — video…Nebula Security's autonomous code-scanning agent VEGA discovered and chained two zero-days -- a Firefox IonMonkey JIT type-confusion flaw (CVE-2026-10702) and…https://intel.threadlinqs.com/reel/threat/threat-intel-ionstack-android-17-root-chain-tl-2026-1477.mp4?v=01cfe03b602026-10-20T18:56:16+00:00yes https://intel.threadlinqs.com/threat/TL-2026-1488/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-skynet-w32-skyai-malware-tl-2026-1488.webp?v=ca2f2d8dW32/SkyAI Windows Malware With LLM Prompt Injection — video briefingA Windows PE sample self-identified as "Skynet" (also tracked as W32/SkyAI or Topozuy) embeds a hand-crafted prompt-injection string aimed at tricking…https://intel.threadlinqs.com/reel/threat/threat-intel-skynet-w32-skyai-malware-tl-2026-1488.mp4?v=ca2f2d8d602026-10-20T17:59:12+00:00yes https://intel.threadlinqs.com/threat/TL-2026-1594/videohttps://intel.threadlinqs.com/reel/threat/threat-intel-rehub-ransomware-marketplace-tl-2026-1594.webp?v=706aa414ReHub Sponsors DragonForce and LockBit: Analysis & Hunting — video…ReHub is a Russian-language cybercrime forum and marketplace launched on August 10, 2025 by a former XSS forum moderator following the July 22, 2025…https://intel.threadlinqs.com/reel/threat/threat-intel-rehub-ransomware-marketplace-tl-2026-1594.mp4?v=706aa414602026-10-20T18:46:36+00:00yes