Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Kimwolf v7 Android/IoT Botnet: Detecting and Defending Against HTTP/2 DDoS Attacks That Mimic Legitimate Browsing
Introduction Palo Alto Networks Unit 42 has disclosed a significant evolution of the Kimwolf/AISURU botnet — version 7 — discovered in Febru...
Zoom Annotation Tool Flaws Enable Zero-Click Client Takeover: Detection, Patching, and Hardening Guide
Introduction Zoom has disclosed a set of serious vulnerabilities in its annotation feature — the tool that lets meeting participants draw, h...
CVE-2026-58231: SAP Commerce Cloud Data Hub RCE (CVSS 10.0) — Detection, Hardening, and Remediation Guide
Introduction SAP's August 2026 Security Patch Day release includes a fix for CVE-2026-58231, a maximum-severity vulnerability in the SAP Com...
CVE-2026-59310: Actively Exploited VMware vCenter Directory Traversal — Detection and Remediation Guide
CVE-2026-59310: VMware vCenter Under Active Attack Broadcom's VMware vCenter Server is once again in the crosshairs. Security researchers at...
737 Malicious Chrome VPN Extensions Caught Proxying User Traffic — Detection, Hunting, and Removal Guide
Introduction A newly disclosed campaign has put a hard number on a problem many of us in IR have been quietly tracking for years: 737 free V...
LiteLLM PyPI Supply-Chain Attack: 2,100+ Organizations Exposed — Detection, Hunt Queries, and Credential Rotation Guide
What Happened In March 2026, two malicious releases of LiteLLM — one of the most widely deployed Python libraries for brokering calls to lar...
Malicious SIM Cards Can Execute Attacker Code on Cellular IoT Modems — Detection and Hardening Guide
Introduction Security researchers at the University of Birmingham and firmware security firm Fuzzware have demonstrated something defenders ...
Gunra Ransomware Hits Government and Critical Infrastructure — Detection, Hardening, and Response Guide
Introduction Joint warnings from U.S. federal agencies and South Korea's National Police Agency have put government and critical infrastruct...
BdThemes Supply-Chain Compromise: Rogue WordPress Admin Accounts — Detection and Remediation Guide
BdThemes Supply-Chain Compromise: Rogue WordPress Admin Accounts — Detection and Remediation Guide A threat actor compromised the upstream i...