Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Malicious AUR Packages Impersonating yay and paru Deliver Root-Level Malware — Detection and Remediation Guide for Arch Linux Defenders
Supply-Chain Attack Hits the Arch User Repository A threat actor has uploaded malicious packages to the Arch User Repository (AUR) impersona...
PoeLLM Malware Infects Exposed AI Servers for Cryptomining: Detection and Hardening Guide
Exposed AI Infrastructure Is the New Cryptomining Goldmine Security researchers have disclosed an active cryptomining campaign deploying mal...
BPFDoor and AVERAT Linux Implants Targeting Telecom Network Edge Appliances — Detection and Remediation Guide
Executive Summary Rapid7's threat research team has published new intelligence on a Linux malware set purpose-built to blend into telecommun...
Hermes AI-Driven Espionage, N4D go-titan & Supply Chain Credential Theft: OTX Pulse Detection Pack
Threat Summary Five concurrent OTX pulses converge on a single operational theme: industrialized credential and secret theft, increasingly a...
RedC2 4.0 Linux Implant Delivered via 14 Trojanized npm Packages — Detection and Remediation Guide
Introduction Cybersecurity researchers have uncovered a coordinated supply-chain campaign in which 14 trojanized npm packages — masquerading...
Evooo1Bot Linux Botnet: Mirai-Derived Malware Turns Edge Devices Into SOCKS5 Proxies — Detection and Remediation Guide
Evooo1Bot: The Latest Mirai Descendant Is Building Proxy Infrastructure Out of Your Edge Devices Security researchers have disclosed a previ...
C0XMO Botnet: Detecting DD-WRT Exploitation and Rival Malware Termination
C0XMO Botnet: Detecting DD-WRT Exploitation and Rival Malware Termination Introduction A new variant of the Gafgyt botnet, dubbed C0XMO, is ...
Dutch Botnet Takedown: Detecting and Remediating the 17-Million Device IoT Worm
Introduction In a significant operation against cybercrime, Dutch authorities have dismantled a massive botnet comprising approximately 17 m...
Packagist Supply Chain Attack: Detecting Malicious Linux Binaries via package.
Introduction Security researchers at Socket have uncovered a coordinated supply chain campaign targeting the Packagist repository, the prima...