Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CISA KEV Alert: Zammad CVE-2026-102489 & CVE-2026-102490 — Session Fixation and Privilege Escalation Under Active Exploitation
On October 2, 2026, CISA added two vulnerabilities in Zammad GmbH's open-source ticketing and customer support platform to its Known Exploit...
GitLab AI Gateway 9.9 Critical Flaw: Command Execution on Self-Hosted Servers — Detection and Remediation Guide
GitLab AI Gateway 9.9 Critical Flaw: Command Execution on Self-Hosted Servers — Detection and Remediation Guide GitLab has patched a critica...
InvoicePlane 1.7.1 Critical Code Execution Flaw: Detection and Remediation Guide for Self-Hosted Billing Servers
A Public Exploit Means the Clock Is Already Running A critical remote code execution vulnerability in InvoicePlane 1.7.1 has been published ...
Ecava IntegraXor IGX 16.0.701.10 Remote Code Execution: Defending SCADA/HMI Systems Against a Public PoC
Introduction A public exploit targeting Ecava IntegraXor (IGX) version 16.0.701.10 has been published on Exploit-DB (entry 52688), detailing...
CVE-2026-86131: Critical WatchGuard Fireware OS Code Injection — Firebox Detection and Remediation Guide
CVE-2026-86131: Critical WatchGuard Fireware OS Code Injection — Firebox Detection and Remediation Guide WatchGuard has shipped security upd...
Malicious Custom GPTs Weaponize ChatGPT and Google Domains in ClickFix RAT Campaign — Detection and Hardening Guide
A Trusted Domain Is the New Phishing Page Security researchers have uncovered an active ClickFix-style campaign in which threat actors abuse...
CVE-2026-64893: Johnson Controls EasyIO Neo Controllers Leak Credentials in Cleartext — Detection and Remediation Guide
Introduction CISA has published ICS advisory ICSA-26-274-05 disclosing a cleartext transmission vulnerability — tracked as CVE-2026-64893 — ...
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack Threat Summary Two li...
BOOBA PROJECT Ransomware Gang: 6 New Leak-Site Listings Targeting Healthcare, Education & Government — Sector Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-02 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...