2026-04-27T15:22:54Z https://yabu.me IFIN - The Independent Federated Intelligence Network https://yabu.me/npub1qm4tytdmranfklywc562p7gprs702mzkc4usqv6t8ja3d340evpslnh363 https://media.infosec.exchange/infosec.exchange/accounts/avatars/115/741/367/687/413/652/original/8fc4c8a9eead7ead.png https://media.infosec.exchange/infosec.exchange/accounts/avatars/115/741/367/687/413/652/original/8fc4c8a9eead7ead.png https://yabu.me/nevent1qqsqcp6qzfej8quklj3fu9p359yayzl0lt7j388zplaftez69ugss7gzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxgmg53p RE: <a href="https://infosec.exchange/@mttaggart/116461922134943653">https://infosec.exchange/@mttaggart/116461922134943653</a><br/><br/>When opportunity (malware) comes a-knocking, you let it in (fire up the sandbox and disassembler).<br/><br/>#malware #ThreatIntel #ThreatIntelligence #IFIN<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1nq6ga2rz9d8jrkgpzg93n6fdswsjlu840gy69wvldumpmhh6j0ns8dctqd" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1nq6…ctqd</a></span><br/> </div> Been a while since I've gotten to do real malware analysis. That was fun!<br/><br/><a href="https://discourse.ifin.network/t/winos-4-0-holdinghands-expanding-beyond-asia-an-opportunistic-analysis/316">https://discourse.ifin.network/t/winos-4-0-holdinghands-expanding-beyond-asia-an-opportunistic-analysis/316</a> </blockquote> 2026-04-24T21:59:20Z https://yabu.me/nevent1qqsy4z44tkuj60g8gvkzpz4hvsw7kudp3z405snwzmpnkvegcpnhdtqzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxs4mx97 In reply to <a href='/nevent1qqszufxzullqueuf88xk94upy8kj33s4cvng95vvnzeun0upuqhw7esa0mwks'>nevent1q…mwks</a><br/>_________________________<br/><br/>Since we were the ones subtooted, it&#39;s worth clarifying: it is *impossible* to get every moderation decision right, and avenues for appeal are absolutely possible. If we make a mistake, we&#39;ll own it. Always.<br/><br/>However, on balance, this signal tends to demonstrate the seriousness with which you approach the issue and our community. If leaning on the side of safety means an occasional false positive, that&#39;s a price worth paying. 2026-04-24T20:54:27Z https://yabu.me/nevent1qqsxuxdn4rfju3s68g7ds3sj5mlw0ny8hy9e3kav8zlxkzak3rqsdqczyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxp40fkt Tell your friends. Mess around with the single field we ask for during onboarding, and we will toss you. If you don&#39;t take this seriously, we have no reason to expect you to respect our community&#39;s safety.<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/461/007/477/566/875/original/76376544204c5095.png"> <br/> 2026-04-24T18:05:47Z https://yabu.me/nevent1qqsta0g76ngpfpylm62wye9dmsr0r7d87gsfm5h5e6x9asddr7yvmwszyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxgtm75g We&#39;ve been on a tear adding new sources to our RSS aggregator! All the cyber news that&#39;s fit to print, in one place: <a href="https://news.ifin.network">https://news.ifin.network</a> 2026-04-23T17:39:38Z https://yabu.me/nevent1qqs8alyd8py02wz4n4f57x4dnpvcpakgd34alekck35f765z4rps7tszyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx654m92 Bitwarden&#39;s CLI NPM package was hijacked and used to spread credential stealer malware. This is related to the previous Checkmarx compromise.<br/><br/>We&#39;ll be updating this thread as always with new information. Come join the effort!<br/><br/><a href="https://discourse.ifin.network/t/teampcp-campaign-spreads-to-npm-via-a-hijacked-bitwarden-cli/305">https://discourse.ifin.network/t/teampcp-campaign-spreads-to-npm-via-a-hijacked-bitwarden-cli/305</a> 2026-04-23T15:08:31Z https://yabu.me/nevent1qqs268jk94eee0gvl3fuf5k47xerjdysqzvnf57yauc2z22g5clc9ngzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx5k6f9v The best time to block api.telegram[.]org was like, I dunno, five years ago? The second best time to do it is now.<br/><br/>Seriously. Cross that one off the easy wins list today.<br/><br/>#ThreatIntel #ThreatIntelligence #IFIN 2026-04-22T15:25:32Z https://yabu.me/nevent1qqsg35g0vvctltdzpv63jg43nwy2wrkuazadmcyhctz4sjrwd6d4uwczyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxsy4mef RE: <a href="https://infosec.exchange/@ifin/116432853020620365">https://infosec.exchange/@ifin/116432853020620365</a><br/><br/>Thanks to some excellent reporting from Infostealers by Hudson Rock, we know a context[.]ai employee was seeking Roblox cheats when they got hit with LummaStealer, leading to the initial breach which impacted Vercel.<br/><br/><a href="https://discourse.ifin.network/t/vercel-confirms-breach-as-hackers-claim-to-be-selling-stolen-data/293/7">https://discourse.ifin.network/t/vercel-confirms-breach-as-hackers-claim-to-be-selling-stolen-data/293/7</a><blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1v6vqu2qzyk9zulzpplvgr655ffwndc84m5jdl50lwsl7h06aaagsq6k8zn" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1v6v…k8zn</a></span><br/> </div> We're actively tracking developments here: <a href="https://discourse.ifin.network/t/vercel-confirms-breach-as-hackers-claim-to-be-selling-stolen-data/293">https://discourse.ifin.network/t/vercel-confirms-breach-as-hackers-claim-to-be-selling-stolen-data/293</a> </blockquote> 2026-04-21T16:58:33Z https://yabu.me/nevent1qqs20yy24stuc3txtpk02kpyhrs4dsyhsd774rfy5qk5vc98jpzphrgzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxdan4xs In reply to <a href='/nevent1qqs83cug2qrrgxe95nyfkg292p3pyxhd93st6rfcq7c07qmjmws87zq8gzvsy'>nevent1q…zvsy</a><br/>_________________________<br/><br/>What a hassle! We&#39;ll look into it. Apologies for the inconvenience!<br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kp7e9nzstq7up4rfch5j4nxa0mqxqy4gsqme6p7y847nmq2h0ygqrgrszc" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Fritz Adalis</span> (<span class="italic">npub1kp7…rszc</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1v9rfxr538ppy58765llpk88spjrdmph4lalf7lu574fqwdwpxzjqr9d02r" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Rob Carlson</span> (<span class="italic">npub1v9r…d02r</span>)</a></span> 2026-04-21T14:27:01Z https://yabu.me/nevent1qqsretz8seg7cz7sp053j4k4ym5jmfv5h0ktv083c0pwnmee9sg823qzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxmu3eav Today we&#39;re talking about another (???) issue in the Cursor AI IDE. Well actually it&#39;s two issues, one of which is simple command injection; the other is takeover via Dev tunnels. Don&#39;t know what dev tunnels are? Come find out—then block them with extreme prejudice.<br/><br/><a href="https://discourse.ifin.network/t/cursors-remote-tunnel-capability-is-vulnerable-to-malicious-prompt-injection/295">https://discourse.ifin.network/t/cursors-remote-tunnel-capability-is-vulnerable-to-malicious-prompt-injection/295</a><br/><br/>#IFIN #ThreatIntel #ThreatIntelligence 2026-04-20T19:08:26Z https://yabu.me/nevent1qqst4plsdlm75vzws8wrw8df54lex9uwm4vrdphrfam7msq833qwvxszyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx929qj8 #Vercel update. We now know, thanks to Vercel&#39;s CEO, that the compromise came by way of the context[.]ai Office Suite, using OAuth tokens collected from a breach last month. Details here:<br/><br/><a href="https://discourse.ifin.network/t/vercel-confirms-breach-as-hackers-claim-to-be-selling-stolen-data/293/6">https://discourse.ifin.network/t/vercel-confirms-breach-as-hackers-claim-to-be-selling-stolen-data/293/6</a> 2026-04-20T12:16:39Z https://yabu.me/nevent1qqsxdxqw9qpztz3w03qslkypa22y5hfkur6a6fxl68lhg0lthaw775gzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxu2w8tf In reply to <a href='/nevent1qqs0m9sk5ljaq3uffprrqhrwur5rq2qkyf2qvp9m79uduv3s3dyrgugmg2v3j'>nevent1q…2v3j</a><br/>_________________________<br/><br/>We&#39;re actively tracking developments here: <a href="https://discourse.ifin.network/t/vercel-confirms-breach-as-hackers-claim-to-be-selling-stolen-data/293">https://discourse.ifin.network/t/vercel-confirms-breach-as-hackers-claim-to-be-selling-stolen-data/293</a> 2026-04-19T18:45:44Z https://yabu.me/nevent1qqs0m9sk5ljaq3uffprrqhrwur5rq2qkyf2qvp9m79uduv3s3dyrgugzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxkgzf6y #Vercel customers: don&#39;t wait. Proactively rotate keys, passwords and environment variables ASAP.<br/><br/><a href="https://vercel.com/kb/bulletin/vercel-april-2026-security-incident">https://vercel.com/kb/bulletin/vercel-april-2026-security-incident</a> 2026-04-19T17:46:34Z https://yabu.me/nevent1qqszyvvgrkeyhsrtvgq7wk3xsmy5zxn2gnlvamsy6c953ugqx7r2cfqzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx0j28xk In reply to <a href='/nevent1qqs0935rj6s4esx4tmxsqdsvmqeqt9q2t78mr6heu09gjh7c6wje3ecd6q7p7'>nevent1q…q7p7</a><br/>_________________________<br/><br/>Thanks so much for including us!<br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1ljmfkwmllavdpnf5tgmrfay6mj4t78c0xryugfw4qka0c4exas0q2pw8tm" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>jonny (nonvenomous)</span> (<span class="italic">npub1ljm…w8tm</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1n7zz894h5ugju2uzuvtsladk0lq3tznlrjd52nljvf45smprjghqcwjm2n" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Lenny Zeltser</span> (<span class="italic">npub1n7z…jm2n</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1ur9qljq4fg3ahdy4rxal8n37xuscn2958g69kkp3ngfu23g23xass8v3q2" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Fractal Kitty</span> (<span class="italic">npub1ur9…v3q2</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub18ak6r2run0k5vadryvdp5nuzscqkummqp3z5m3dzz24zfepnudwsf3untn" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>ploum</span> (<span class="italic">npub18ak…untn</span>)</a></span> [@otterlove](<a href="https://mastodon.art/@otterlove">https://mastodon.art/@otterlove</a> ) <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1388cy7ljtym4jag6l7d9c2tczk64y7c4qhxzy2g87wfy830760xqlusxrr" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Max Leibman</span> (<span class="italic">npub1388…sxrr</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1jjwz42h80fn278xjas9y2k9eeysjqyyh0w4r2kagqw6wf6wt748sex2z5l" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Hyde 📷 🖋 :debian:</span> (<span class="italic">npub1jjw…2z5l</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1xhjvfwgv2nqnespjrvxh5ky9jzvxappwpm4kxdcjl90l559gexds98hq9k" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Naty</span> (<span class="italic">npub1xhj…hq9k</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1yg8lnapwc8yyd0m32jcfdp7k28hwmsvtsqc59rsj6d6d0m3mynqs7tccz0" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Taggart :ifin:</span> (<span class="italic">npub1yg8…ccz0</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1c993q8n9ke28hqf9x7u0clqedrd8rpq7n9lueuw9d3nfnrcjyfpsczljas" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>readbeanicecream</span> (<span class="italic">npub1c99…ljas</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1x7454l785ug9mhfg0dh2aq9xj9equmrgyhj05lchj4vn5k5z97asvnruph" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Joel :casio: :blobcatderpy:</span> (<span class="italic">npub1x74…ruph</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1j33kuu9hrg2ukwtnnpyy4hgs70hhlvl5pf3vgv9l68y8spe8cdxqsj55x2" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Taran Rampersad</span> (<span class="italic">npub1j33…55x2</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1wp7duwkkw0r7q45f6yfdr3kn63chtm4dfy76yjetx4nhmqantekspr7eym" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Red 🟥</span> (<span class="italic">npub1wp7…7eym</span>)</a></span> [@_elena](<a href="https://mastodon.social/@_elena">https://mastodon.social/@_elena</a> ) <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1c2u267rt55rdn6h3myzw0c3fs0ake3ez8g54675as3h20eqam8sscdzg55" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Space Hobo</span> (<span class="italic">npub1c2u…zg55</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1l2k3sf7vk3kpy0s4ggvaf8dq8079lduf4q38thxz8chmgdwyee0qp46m2l" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Connected Places</span> (<span class="italic">npub1l2k…6m2l</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1dhl6470pzgczhuy6yxgpf595l998vppl0jje2swukmwyk7qny6dq0qud8y" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>gloriouscow</span> (<span class="italic">npub1dhl…ud8y</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1090hjdt6ra9glpm5chzx8vahs5rerzejcy0ektcwyr32078ar8yqe9cff7" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Nicolas Gouny</span> (<span class="italic">npub1090…cff7</span>)</a></span> 2026-04-18T11:47:39Z https://yabu.me/nevent1qqsf9s7vd8shhqn7na8haq72y7z7p0f3zxh3ghnukwd0tw2x7lrvlkqzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx90hexw In reply to <a href='/nevent1qqstgmpj4eyaxz0fkfj29f044gr82se5jnc7cfedz6mnsqzdaqwdlrcapnca2'>nevent1q…nca2</a><br/>_________________________<br/><br/>Proud of you bb 2026-04-18T00:26:55Z https://yabu.me/nevent1qqs202evwjy0yvve4gtcyswwjzc4xe4wxet99wzy0fhh0qt8ysvh82gzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxhdjknv After working on it a bit, we have a fix for a recent #ClickFix attack against #macOS that leverages AppleScript. Here&#39;s the writeup, and a link to the forum thread!<br/><br/><a href="https://ifin-intel.org/blog/applescript/">https://ifin-intel.org/blog/applescript/</a><br/><br/>#ThreatIntel #ThreatIntelligence #IFIN 2026-04-16T01:05:08Z https://yabu.me/nevent1qqs05993cqs8w0a5wlh7c6wsdh6f0utqhrrw3ey5cqr7ew22tu6h2lszyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxltr7wg Well well well, would you look at that<br/><br/><a href="https://discourse.ifin.network/t/activitypub-test/271/1">https://discourse.ifin.network/t/activitypub-test/271/1</a> 2026-04-15T04:33:44Z https://yabu.me/nevent1qqsgf0kw4nfeef8m4qmr7upcx0vg3d0ygqchtgrxvdkav8wzdxp7xngzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx78tsue Following up on an excellent blog post we discovered (linked in thread), we dug a little deeper on a recent #WordPress plugin compromise. We have more IoCs for you, and what we believe to be a use of the blockchain for an initial access auction for the plugin install base.<br/><br/><a href="https://discourse.ifin.network/t/someone-bought-30-wordpress-plugins-and-planted-a-backdoor-in-all-of-them/265/8">https://discourse.ifin.network/t/someone-bought-30-wordpress-plugins-and-planted-a-backdoor-in-all-of-them/265/8</a><br/><br/>#ThreatIntel #ThreatIntelligence #ThreatHunting #IFIN 2026-04-14T17:13:23Z https://yabu.me/nevent1qqsy4d8y32pvkjk44ml7zznmtcwrynu75vtsz40a4a745cd7davzn3qzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxmgft33 CISA is claiming that #Iran is once again targeting Programmable Logic Controllers (PLCs), similar to efforts in 2024. Has anyone seen recent evidence of this? None was provided from CISA, and we&#39;d love independent confirmation. 2026-04-13T19:21:03Z https://yabu.me/nevent1qqsfea9ngul78fm4q3egkytjr4y6zh0w99ulhnghfkgumxkff3leraczyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxp4tfnd We ask for preferred pronouns when you register. We do this so everyone can address you how you wish. But it&#39;s also a signal of how you&#39;ll treat others. <br/><br/>We just rejected a forum account application because of joke pronouns. That is such a low barrier and if you don&#39;t take it seriously, we have no confidence you&#39;ll treat our community members with respect. 2026-04-11T14:56:14Z https://yabu.me/nevent1qqs9up6fy54y7d0x4fpyz4u0fpd6r57ns7j23gv69jet8tk7t62tkyqzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxev4tge RE: <a href="https://infosec.exchange/@cR0w/116052391841771930">https://infosec.exchange/@cR0w/116052391841771930</a><br/><br/>Come gather round. We&#39;ll tell stories together for free.<br/>nostr:note17teqm8m359cjtwf6qcafdl02c44l94j5k02ypkylgjsf9savh4gq2e9am9<br/> 2026-04-10T21:04:23Z https://yabu.me/nevent1qqs0mqnt2mgwakvfmkxwzykm80ztzv9sv65uxnkumy74x97p30e9jrszyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxumxh3p CPUID downloads were temporarily compromised earlier today. We have a thread compiling analysis and IoCs for you to investigate:<br/><br/><a href="https://discourse.ifin.network/t/hwmonitor-download-compromised/249">https://discourse.ifin.network/t/hwmonitor-download-compromised/249</a><br/><br/>#ThreatIntel #IFIN #ThreatIntelligence 2026-04-10T13:49:31Z https://yabu.me/nevent1qqsgm50nrjsdqe0xpnuqvlrpdh84dqa2sjflv56gwna3hrkrr869j5qzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx9zx406 In reply to <a href='/nevent1qqsd53zp9ll6t79jt9kvtzh2s7m93n0nvz7jfaqlrwgmxnk639dn67cmjqp6w'>nevent1q…qp6w</a><br/>_________________________<br/><br/>:ablobcatpopcorn: 2026-04-09T16:20:46Z https://yabu.me/nevent1qqs28djadv4t94j5xx0cqjgjfzd5gyuxeft83rhae9m0la2hh2v6uwczyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx4dhl7m This right here?<br/><br/>This is a huge part of why we exist. It&#39;s time to trust in each other for our mutual protection, because nobody is coming to save us.<br/><br/><a href="https://www.securityweek.com/white-house-seeks-to-slash-cisa-funding-by-707-million/">https://www.securityweek.com/white-house-seeks-to-slash-cisa-funding-by-707-million/</a> 2026-04-09T13:09:12Z https://yabu.me/nevent1qqswuh0ptwsx204n8eawkdfwvgg5xvx023v9cves7evmecg7lznfeaqzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx7d2uz3 In reply to <a href='/nevent1qqsyg7kg6vf33vhsxd9trkvajpuas9h8nt975c4nr9ldg5chv6messg42ch6q'>nevent1q…ch6q</a><br/>_________________________<br/><br/>So, how this works is:&lt;li&gt;Our community finds something interesting&lt;/li&gt;&lt;li&gt;We make a thread&lt;/li&gt;&lt;li&gt;We investigate together&lt;/li&gt;&lt;li&gt;The data &lt;u&gt;remains searchable&lt;/u&gt; for future reference&lt;/li&gt;&lt;li&gt;We all win&lt;/li&gt;<br/><br/>Come join us! 2026-04-08T19:09:36Z https://yabu.me/nevent1qqsyg7kg6vf33vhsxd9trkvajpuas9h8nt975c4nr9ldg5chv6messgzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxm3hqhh Looks like we have a live one here. Weird Rust maintainer phishing campaign using crates[.]ws:<br/><br/><a href="https://discourse.ifin.network/t/bizarre-crates-io-phishing-campaign/232">https://discourse.ifin.network/t/bizarre-crates-io-phishing-campaign/232</a> 2026-04-08T18:53:37Z https://yabu.me/nevent1qqs0xnwhq8ssngmnf7zhelwhqw8cajwkswyy53d82tpmhv0jzu2386szyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx92eyrn In reply to <a href='/nevent1qqsdxljntqphljuvek4fc5skvw9ul0raw0vzqpuatcdjlpsvu9xqt5qgeg55t'>nevent1q…g55t</a><br/>_________________________<br/><br/>I&#39;ve been trying to think of a way to describe our relationship and this is pretty much flawless.<br/><br/>IFIN :rainbow_heart: <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1eznzdgefq0ece8yljlxtaadscv4skav3ckk38gv3qw04s25mrt2s5fnyq3" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GAYINT</span> (<span class="italic">npub1ezn…nyq3</span>)</a></span> 2026-04-07T19:05:27Z https://yabu.me/nevent1qqs8ssjyn4reyat7z74knxdzqf3xwsdk4f5770jyg8tr3ajpzmsqtdgzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxr3m0ex CISA just published an advisory about IRGC activity against Rockwell/Allen-Bradley PLCs. This is a return to form for IRGC, following patterns observed in 2023.<br/><br/><a href="https://discourse.ifin.network/t/iran-conflict-cyber-threat-activity/145/25">https://discourse.ifin.network/t/iran-conflict-cyber-threat-activity/145/25</a> 2026-04-07T18:35:33Z https://yabu.me/nevent1qqsq72ym46tmg4vzss5q8vak5c0ul67zek60znzpur0c9egr8dfvengzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxcmyd83 Folks here will probably be interested in our AI policy:<br/><br/>&gt; With so many downside risks, and with such dubious benefit to usage, the choice for IFIN is clear: we choose not to participate in the toxic cult of generative AI. Our published material and code are not produced with these models.<br/><br/><a href="https://ifin-intel.org/policies/ai/">https://ifin-intel.org/policies/ai/</a> 2026-04-07T17:30:23Z https://yabu.me/nevent1qqs95vg92ky74cjgwz8wjgz6jy206m6uwzf57wj7tzw4gnx0y42chpgzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx69p5d2 In reply to <a href='/nevent1qqs0ptdhcaems3u90aytzrkme5hgxuuyddthhn6n649luyd6uz9jexsfpxwed'>nevent1q…xwed</a><br/>_________________________<br/><br/>Haha insta-hugged. Standby! 2026-04-07T15:48:30Z https://yabu.me/nevent1qqs0ptdhcaems3u90aytzrkme5hgxuuyddthhn6n649luyd6uz9jexszyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sxcmp2zt And our first contribution: here is our thread on currently tracked #Iran-based cyber threat activity, including motivations and targeting information.<br/><br/><a href="https://discourse.ifin.network/t/iran-conflict-cyber-threat-activity/145/23">https://discourse.ifin.network/t/iran-conflict-cyber-threat-activity/145/23</a> 2026-04-07T15:45:24Z https://yabu.me/nevent1qqst0xvxd0v04mqdkxwg2s4zhss93dz9d28dt9735d45nrc7vwkk4vgzyqrw4v3dhv0kdxmu3mznfg8eqywreatv2mzhjqpnfv7tk9kx4l9sx7y288w Hello, world!<br/><br/>We are IFIN, the Independent Federated Intelligence Network, and we want to change how threat intelligence is done.<br/><br/>We believe we&#39;re all safer when we share what we know. Come learn more and join us!<br/><br/><a href="https://ifin-intel.org/blog/hello/">https://ifin-intel.org/blog/hello/</a><br/><br/>#ThreatIntel #ThreatIntelligence #Cybersecurity #Infosec 2026-04-07T15:31:14Z