Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
LLMjacking via Malvertising: How Phished Cloud Credentials Become Six-Figure AI API Bills — Detection and Response Guide
Introduction A new wave of financially motivated attacks documented by Wiz demonstrates a threat chain that every cloud-first organization n...
Zero-Click Candiru Spyware Delivered via Malvertising: Detection and Hardening Guide for SOC Teams
The Attack: Spyware Delivered by Simply Rendering an Ad Security researchers have documented a campaign in which devices at Al Jazeera Media...
Fake AI App Campaigns Hit US Companies: How MSSPs Detect and Contain AI-Themed Malware Delivery
Introduction The AI gold rush has created a new social engineering surface, and threat actors are exploiting it at scale. Between April and ...
Candiru Zero-Click Spyware Delivered via Malvertising: Detection and Hardening Guide for the Al Jazeera Attack Chain
Introduction Researchers at The Citizen Lab disclosed this week that devices belonging to journalists at Al Jazeera were infected with spywa...
Google Ads and Bing Redirects Abused to Push Fake Claude Installers: ClickFix Detection and Response Guide
Introduction Attackers are abusing legitimate advertising and search redirect infrastructure - Google search ads whose click URLs are routed...
SectopRAT via Fake Claude Desktop Installers: Bing Malvertising, EtherHiding C2 & DLL Sideloading — OTX Detection Pack
SectopRAT via Fake Claude Desktop Installers: Bing Malvertising, EtherHiding C2 & DLL Sideloading — OTX Detection Pack Classification: TLP:W...
HBO Max Reddit Account Hijacked to Push ClickFix Malware Ads: Detection and Defense Guide for Infostealer Campaigns
Introduction Threat actors compromised the official HBO Max Reddit account and weaponized its credibility to distribute malicious advertisem...
StreamRat Android Banking Trojan Spread via Meta Ads — Detection and Remediation Guide
StreamRat Android Banking Trojan Spread via Meta Ads — Detection and Remediation Guide What Happened ThreatFabric has disclosed a new Androi...
SocGholish Dropcatch Scavengers + Project CAV3RN Google Apps Script C2: OTX Pulse Analysis — Enterprise Detection Pack
SocGholish Dropcatch Scavengers + Project CAV3RN Google Apps Script C2 Threat Summary Two fresh OTX pulses published 2026-08-13/14 expose pa...