Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ConnectWise ScreenConnect Under Active Exploitation: CISA-Confirmed Detection and Remediation Guide
Introduction CISA has confirmed what many of us in incident response have been watching build on the ground: a critical-severity vulnerabili...
Rogue ScreenConnect Clients Spread Four-Stage VBScript Worm: Detection and Remediation Guide
Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts Threat actors are turning one of the most common legit...
TERMITE Ransomware: Cross-Border Healthcare Targeting & VPN Exploitation Surge
Threat Actor Profile — TERMITE Aliases: Termite Team, Termite Encryptor Operational Model: Emerging RaaS (Ransomware-as-a-Service) operator ...
DEADLOCK Ransomware: Global Surge In Business Services & Public Sector Targets
Threat Actor Profile — DEADLOCK Aliases & Affiliation: DEADLOCK is a relatively new but highly active ransomware operation believed to opera...
QILIN Ransomware: 16 Victims Hit in Global Construction & Finance Surge — Detection Rules
Threat Actor Profile — QILIN Aliases: Agenda, Titan Operating Model: Ransomware-as-a-Service (RaaS). Qilin operates on an affiliate model, r...
QILIN Ransomware: Financial Sector & Critical Infrastructure Under Siege — Detection Rules & IOCs
QILIN Ransomware: Financial Sector & Critical Infrastructure Under Siege Date: 2026-06-22 Source: Ransomware.live / Direct .onion Observatio...
THEGENTLEMEN Ransomware: 15 New Victims Posted — Surge in Healthcare & Tech Targeting via Cisco & ConnectWise
THEGENTLEMEN Ransomware: 15 New Victims Posted — Surge in Healthcare & Tech Targeting via Cisco & ConnectWise Threat Actor Profile — THEGENT...
THEGENTLEMEN Ransomware: 15 New Victims Posted — Global Healthcare & Tech Surge + KEV Exploitation
Intelligence Summary Date: 2026-06-08 Actor: THEGENTLEMEN Activity: Publication of 15 new victims on dark web leak site. Security Arsenal an...
QILIN Ransomware: 15 New Victims Identified — Cross-Sector Surge & Critical CVE Exploitation
Threat Actor Profile — QILIN Aliases: Agenda, Qilin.Bloody Operational Model: Ransomware-as-a-Service (RaaS). Qilin operates an affiliate mo...