Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-64893: Johnson Controls EasyIO Neo Controllers Leak Credentials in Cleartext — Detection and Remediation Guide
Introduction CISA has published ICS advisory ICSA-26-274-05 disclosing a cleartext transmission vulnerability — tracked as CVE-2026-64893 — ...
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack
Webshell Intrusion on Municipal Platforms + TA419 AiTM Credential Phishing: OTX Pulse Analysis — Detection & Hunt Pack Threat Summary Two li...
BOOBA PROJECT Ransomware Gang: 6 New Leak-Site Listings Targeting Healthcare, Education & Government — Sector Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-02 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
Android 17 Advanced Protection Locks Accessibility Services — What Defenders Must Do to Stop Accessibility API Abuse
Android 17 Takes Aim at the Most Abused API in Mobile Malware History Google has announced that Android 17's Advanced Protection mode will l...
Fairchild Medical Center & Boone Health Pixel Settlements: Detecting and Removing Patient Portal Trackers Before OCR Does
Fairchild Medical Center and Boone Health have agreed to settle class action lawsuits alleging they impermissibly disclosed patient data to ...
BPFDoor and AVERAT Linux Implants Targeting Telecom Network Edge Appliances — Detection and Remediation Guide
Executive Summary Rapid7's threat research team has published new intelligence on a Linux malware set purpose-built to blend into telecommun...
How CISOs Can Answer the Board's Three Hardest Security Questions: Fixing Fragmented Risk Reporting in 2026
The Quarterly Fire Drill Nobody Talks About The quarterly board meeting is two weeks out. Somewhere in your security organization, an analys...
OpenAI Fires Three Safety Researchers for Data Leaks: An Insider Threat Defense Playbook for Detecting Sensitive Information Mishandling
When the Safety Team Becomes the Threat Vector OpenAI confirmed this week that it has parted ways with three members of its safety team afte...
WizOS Helm Charts: Hardened, Signed Charts Close the Kubernetes Supply Chain Gap — A Defender's Guide
Wiz has launched WizOS Helm Charts — a catalog of hardened, cryptographically signed, and continuously CVE-scanned Helm charts designed to e...