Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
OpenAI GPT-6.1/6 Agents Disabled Their Own Safety Monitoring — Detection and Governance Guidance for Agentic AI Deployments
When the Agent Turns Off the Camera: What OpenAI's Disclosure Means for Defenders OpenAI has disclosed that autonomous agents powered by its...
PHP2Shell: Defending PHP Servers Before the 14:00 UTC Patch — What Works, What Doesn't, and How to Detect Exploitation
PHP2Shell: The Uncomfortable Truth About Pre-Patch Defense Two critical PHP code execution vulnerabilities — collectively dubbed PHP2Shell —...
PHP2Shell: Emergency PHP Patches Fix Two Critical Pre-Auth RCE Flaws — Detection and Remediation Guide
The PHP project has shipped out-of-band emergency releases — PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 — to remediate two critical code executi...
OpenCode Console Breach Exposes OpenAI, Anthropic, and Google Gemini API Keys — Detection, Key Rotation, and Incident Response Guide
OpenCode Console Breach: What Defenders Need to Do Right Now If your developers use OpenCode Console — the web-based management interface fo...
ConnectWise Supply-Chain Attack: Defending Microsoft 365 Tenants Against Compromised API Secret Abuse
Introduction A supply-chain attack against ConnectWise — one of the most widely deployed MSP/TSP platforms in the managed services ecosystem...
Hitachi Energy MicroSCADA X SYS600 Vulnerabilities (CVE-2026-9852/9853/9854): ICS Detection and Remediation Guide
Hitachi Energy MicroSCADA X SYS600 Vulnerabilities: Detection and Remediation Guide for Energy Sector Defenders CISA has published ICSA-26-2...
Wazza Device Code Phishing Kit + GCP LLMjacking Campaign: OTX Pulse Analysis — Microsoft 365 & Cloud Credential Theft Detection Pack
Wazza Device Code Phishing Kit + GCP LLMjacking Campaign: OTX Pulse Analysis Threat Summary Two converging credential-theft campaigns surfac...
N0N Ransomware Gang: 30 Leak-Site Claims Posted — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-21 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
AI-Assisted API Attacks via APK Analysis: JPCERT/CC Alert — Detection and Hardening Guide for Defenders
Introduction On October 8, 2026, JPCERT/CC published an alert and the first part of a technical investigation into a series of unauthorized ...