Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for VAPOR PANDA AI-Driven ARTEX Global Espionage Campaign

VAPOR PANDA AI-Driven ARTEX Global Espionage Campaign

VAPOR PANDA is using the ARTEX agentic AI framework and DeepSeek LLM to conduct simultaneous global espionage against foreign ministries and critical infrastructure sectors.

avatar
ills3c Intel&Coffee@Ills3C2 days ago

2 intel reports

Telerik UI Unauthenticated RCE via File Read Chain

Adversaries can chain a path traversal vulnerability in Telerik RadImageEditor (CVE-2026-18672) with configuration-dependent file upload tampering (CVE-2026-19219) to achieve unauthenticated remote code execution.

avatar
Tim Peck@timpeck
5 days ago
4
Unauthenticated RCE in Telerik UI for ASP.NET AJAX

Tanto Security demonstrated an unauthenticated RCE chain in Telerik UI for ASP.NET AJAX by exploiting an AES-CBC padding oracle to achieve arbitrary type resolution and DLL loading.

avatar
Arnold Chan@slaz
2 months ago
51