Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Red Heron 'Kapibala' WordPress Exploitation Wave + BUGSTER AI-Enabled Credential Theft: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two distinct but thematically linked threat operations surfaced in this reporting window, both centered on large-scale record...
N0N Ransomware: 23 Leak-Site Listings — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-23 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
eMudhra Intermediate CA Private Keys Recovered: Defender's Guide to PKI Compromise Response and Rogue Certificate Detection
The Bottom Line Up Front On Thursday, eMudhra's board decided the Indian certificate authority will withdraw from its global SSL/TLS certifi...
CVE-2026-111594: InterSystems IRIS for Health Ships With TLS Disabled by Default — Detection and Hardening Guide
Introduction CISA has published ICS Medical Advisory ICSMA-26-295-01 covering a significant weakness in InterSystems IRIS for Health, one of...
PHP2Shell: What Criminal Forums Know That Your Exposure Management Program Should — Detection and Remediation Guide
Introduction When the vulnerabilities collectively dubbed PHP2Shell were disclosed, something remarkable happened: the criminal underground ...
CVE-2026-85114 & CVE-2026-85115: Siemens SIMATIC S7 Webserver API .NET Client Library — Detection, Containment, and Patch Guide
Executive Summary CISA published ICSA-26-295-10 for Siemens' .NET Client Library for the SIMATIC S7 Webserver API. The advisory covers CVE-2...
ThreatsDay Defense Playbook: Laravel Auth Bypass, AI Secrets Leak, PingCAP Source Theft, LiteLLM Supply-Chain Risk and Tor Relay Hijacks
ThreatsDay Defense Playbook: Laravel Auth Bypass, AI Secrets Leak, PingCAP Source Theft, LiteLLM Supply-Chain Risk and Tor Relay Hijacks Thi...
Arista VeloCloud Orchestrator Zero-Day Under Active Exploitation: On-Prem VCO Detection and Remediation Guide
Arista VeloCloud Orchestrator Zero-Day Under Active Exploitation: On-Prem VCO Detection and Remediation Guide Arista Networks has released e...
LLMjacking via Malvertising: How Phished Cloud Credentials Become Six-Figure AI API Bills — Detection and Response Guide
Introduction A new wave of financially motivated attacks documented by Wiz demonstrates a threat chain that every cloud-first organization n...