Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Mageia 10 rpmdrake Update (MGASA-2026-0160): Patching the Package Manager and Hardening Linux Software Installation Workflows
Introduction Mageia has released an update for rpmdrake on Mageia 10 (advisory MGASA-2026-0160) correcting view and filter display issues in...
Whole-of-State Defense: How SLED Agencies Can Protect Critical Infrastructure from AI-Driven Threats
Why SLED Organizations Are Now the Soft Underbelly of Critical Infrastructure Defense Tenable's latest commentary, published as the closing ...
Amadey Botnet Disrupted by ASD: 180,000 Infected Hosts Cut Off — Defensive Detection and Remediation Guide
placeholder...
CVE-2026-109618 & CVE-2026-109619: PHP2Shell Detection and Remediation Guide
The PHP2Shell Emergency: Why Your Web Infrastructure Is Under Siege If you are reading this and your organization runs PHP — and statistical...
PHP2Shell in OT: Siemens, Schneider Electric, and ABB Confirm Affected Industrial Products — Detection and Remediation Guide
PHP2Shell Hits the Plant Floor: What OT Defenders Need to Do Now When Siemens, Schneider Electric, and ABB all publish advisory activity aro...
Microsoft 365 Token-Replay Attacks: Defending Against AitM Session Hijacking and Credential Theft
Introduction In early October 2026, security researchers at Huntress disclosed a widespread campaign targeting Microsoft 365 environments. B...
Tailscale SSH Port Forwarding Abuse: One Compromised Node to Root — Detection and Hardening Guide
Introduction A security researcher published findings this week demonstrating that a single compromised device on a Tailscale network can be...
AI Coding Agents Hijacked via Malicious AGENTS.md File — Detection and Mitigation Guide
Introduction Security researchers recently discovered a novel attack technique targeting AI coding agents: a malicious AGENTS.md file placed...
Sandworm and UAC-0099 Wiper Campaign: Detecting MeshAgent-Based Unauthorized Access in the Ukraine Logistics Attack
Sandworm + UAC-0099: A Division-of-Labor Wiper Operation In October 2026, ESET disclosed that the Russian state-sponsored group Sandworm (al...