Product
curl
- First Reported
- Apr 23, 2026
- Latest Reported
- Oct 5, 2026
Reported Context (5)
- We’ve seen this happen before. In early 2026, curl ended its HackerOne bounty program after low-quality, often AI-generated submissions overwhelmed its small security team. Google Pauses Open-Source Bug Bounty Program Amid Surge in AI-Generated Submissions
- code look legitimate. It uses DLL sideloading to hide behind trusted applications such as Poedit, curl, Vim, and TightVNC, with malicious DLLs posing as components from major software vendors, according to Microsoft Finds NeedyMantis Backdoor Used to Maintain Access to Targeted Networks
- Some of the open-source, software abused by the malware include: Poedit (translation), curl (data transfer), Vim (text editor), and TightVNC (remote access). Microsoft details NeedyMantis malware used in targeted post-compromise operations
- It ships with CUPS printing systems and networking tools like cURL. Exposed GitLab Token Had Owner Access to 55 Open-Source Projects
- Daniel Stenberg, the lead developer of cURL, is living the same reality: Mythos Marks an Acceleration in AI-Driven Vulnerability Discovery, Not a Beginning
CVE (1)
Malware (1)
People (10)
Threat Actors (2)
MITRE ATT&CK (9)
Vendors (8)
Products (36)
Tools (2)
Industries (6)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.