Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Kiteworks Emergency Shutdown and Citrix Patch Gap: A Defender's Playbook for Unpatched Vulnerability Response
Two recent vendor incidents — Kiteworks ordering customers to shut down its data-protection platform during a nine-hour emergency window, an...
GitLab AI Gateway Critical RCE: Detection, Patching, and Hardening Guide for Self-Hosted Instances
A Critical RCE in the Newest Part of Your GitLab Stack GitLab has issued an urgent warning to customers running self-managed instances: a cr...
AI-Agent Breach of DIVD via Chained Zammad Zero-Days: Detection and Hardening Guide for Zammad Deployments
Introduction The Dutch Institute for Vulnerability Disclosure (DIVD) — a nonprofit whose entire mission is finding and responsibly disclosin...
CVE-2026-94541: Critical WordPress WPMobile.App Auth Bypass (CVSS 9.8) — Detection and Remediation Guide
Introduction NVD has published CVE-2026-94541, a critical CVSS 9.8, network-exploitable vulnerability in the WPMobile.App – Android and iOS ...
CVE-2026-102490: Zammad Privilege Escalation to Root Actively Exploited — Detection and Remediation Guide
Introduction On October 2, 2026, CISA added CVE-2026-102490 to the Known Exploited Vulnerabilities (KEV) catalog, confirming what defenders ...
TIKTOUK WordPress Credential Harvesting Toolkit + Microsoft Teams Help Desk Social Engineering: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two fresh OTX pulses published on 2026-10-02 reveal a converging threat picture: automated credential harvesting at scale aga...
Kimsuky XenoRAT, Longlegs Warlock Ransomware & Municipal Webshell Campaigns: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three concurrent threat streams dominate this OTX pull, and together they sketch a familiar but accelerating pattern: state-n...
RemusStealer EtherHiding C2, StreamRat Banking Trojan & PamStealer macOS Campaign: OTX Pulse Analysis — Infostealer Detection Pack
Threat Summary Five OTX pulses published this cycle collectively paint a picture of a maturing infostealer-as-a-service economy that has mov...
AKIRA Ransomware Gang: 3 New Leak-Site Listings Across Manufacturing & Professional Services — Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-10-02 | Source: ransomware.live leak-site monitoring | Nature of data: Unverified threat-...