{"id":19732,"date":"2018-11-22T10:54:20","date_gmt":"2018-11-22T10:54:20","guid":{"rendered":"http:\/\/42129b97-d648-4a61-9f30-b436cc2bba9d"},"modified":"2018-11-22T10:54:20","modified_gmt":"2018-11-22T10:54:20","slug":"how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/","title":{"rendered":"How Dropbox’s red team discovered an Apple zero-day exploit chain by accident"},"content":{"rendered":"
<\/div>\n

While probing Dropbox and how the cloud storage system responded to cyberattack attempts, the firm’s red team stumbled across a set of zero-day vulnerabilities in Apple software.<\/p>\n

\n

More security news<\/span><\/h3>\n<\/div>\n

Dropbox’s head of security Chris Evans outlined the situation<\/a>, in which the firm’s Offensive Security red team — security specialists tasked with attacking a system for the purpose of finding holes and weaknesses — came across vulnerabilities in the Apple Safari browser.<\/p>\n

The red team conducted an attack simulation with the help of third-party vendor and penetration test firm Syndis to see if Dropbox was susceptible to being exploited.<\/p>\n

However, the experiment went further than most pen tests. As Dropbox is a repository for vast amounts of user data, the company’s security team also tested how quickly the attack was uncovered, and what the response of the data breach team was, post-exploit.<\/p>\n

“Identifying new ways to break into Dropbox was in scope for this engagement, but even if none were found, we were going to simulate the effects of a breach by just planting malware ourselves (discretely, of course, so as not to tip off the detection and response team),” Evans added.<\/p>\n

As the company geared up to simulate a security breach, they realized they did not have to simulate anything at all — as Syndis stumbled across an exploitable set of zero-day vulnerabilities in Apple software.<\/p>\n

When linked together, the bugs — which impact macOS before 10.13.4 — permitted attackers to execute arbitrary code on a victim’s system simply by visiting a malicious web page.<\/p>\n

\n<\/section>\n

See also: Apple macOS vulnerability paves the way for system compromise with a single click<\/a><\/strong><\/p>\n

“[The vulnerabilities] in Apple software we use at Dropbox didn’t just affect our macOS fleet, it affected all Safari users running the latest version at the time,” the executive says.<\/p>\n

The first vulnerability, CVE-2017-13890<\/a>, allows attackers to abuse Safari for the purpose of automatically downloading and mounting disk images.<\/p>\n

The second bug, CVE-2018-4176<\/a>, utilizes the disk mount to cause an application to launch without user permission. Should a victim visit a malicious web page, however, the Gatekeeper system still only permits apps to launch which are signed by known developers.<\/p>\n

CNET: Microsoft now lets you log into Outlook, Skype, Xbox Live without a password<\/a><\/strong><\/p>\n

This is where the final bug in the exploit chain, CVE-2018-4175<\/a>, comes in. The vulnerability can be used to register new file extensions and launch applications which are then considered safe, thereby executing shell scripts without Gatekeeper becoming involved.<\/p>\n

Together, they resulted in an exploit chain which permitted arbitrary code execution on vulnerable systems when a malicious, crafted web page was visited.<\/p>\n

The vulnerabilities found during the engagement have been credited to Syndis via the Dropbox Offensive team.<\/p>\n

The security team’s findings were disclosed to Apple on February 19, leading to acknowledgment from the iPad and iPhone maker on the same day. After a month of testing and creating a patch, Apple deployed a security fix on March 29<\/a>.<\/p>\n

TechRepublic: How IoT medical devices save your life and threaten your privacy<\/a><\/strong><\/p>\n

However, disclosure appears to have been delayed due to CVE-2018-4389<\/a>, a vulnerability in macOS Mojave 10.14 attributable to Syndis and described as a means to “process a maliciously crafted Mail message which may lead to UI spoofing.” This flaw was not resolved until October 30.<\/p>\n

“Dropbox protects the data of more than 500 million registered users. We know that we are targeted by adversaries that could develop and use zero-day exploits against us, and we need to protect ourselves accordingly,” Evans says. “This engagement was a win for us, for Apple, and for internet users on various levels. Not only did we get to test our defensive posture, we also made the Internet safer by identifying and reporting vulnerabilities in macOS.”<\/p>\n

Previous and related coverage<\/h3>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

The zero-day vulnerabilities were accidentally uncovered while researchers were looking for ways to break into Dropbox.
\nREAD MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":19733,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-19732","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"\nHow Dropbox's red team discovered an Apple zero-day exploit chain by accident 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How Dropbox's red team discovered an Apple zero-day exploit chain by accident 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-11-22T10:54:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident.png\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"578\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"How Dropbox’s red team discovered an Apple zero-day exploit chain by accident\",\"datePublished\":\"2018-11-22T10:54:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/\"},\"wordCount\":652,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident.png\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/\",\"name\":\"How Dropbox's red team discovered an Apple zero-day exploit chain by accident 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident.png\",\"datePublished\":\"2018-11-22T10:54:20+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident.png\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/11\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident.png\",\"width\":770,\"height\":578},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How Dropbox’s red team discovered an Apple zero-day exploit chain by accident\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How Dropbox's red team discovered an Apple zero-day exploit chain by accident 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/","og_locale":"en_US","og_type":"article","og_title":"How Dropbox's red team discovered an Apple zero-day exploit chain by accident 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-11-22T10:54:20+00:00","og_image":[{"width":770,"height":578,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident.png","type":"image\/png"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"How Dropbox’s red team discovered an Apple zero-day exploit chain by accident","datePublished":"2018-11-22T10:54:20+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/"},"wordCount":652,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident.png","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/","url":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/","name":"How Dropbox's red team discovered an Apple zero-day exploit chain by accident 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident.png","datePublished":"2018-11-22T10:54:20+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident.png","width":770,"height":578},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/how-dropboxs-red-team-discovered-an-apple-zero-day-exploit-chain-by-accident\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"How Dropbox’s red team discovered an Apple zero-day exploit chain by accident"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/19732","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=19732"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/19732\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/19733"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=19732"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=19732"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=19732"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}