Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Knight Office M365 AiTM Kit + Tampered Exodus Modular RAT: OTX Pulse Analysis — Session Token Theft and Credential Access Detection Pack
Knight Office M365 AiTM Kit + Tampered Exodus Modular RAT: OTX Pulse Analysis — Session Token Theft and Credential Access Detection Pack Exc...
Sality Botnet Sinkhole & Tampered Exodus Wallet Modular RAT: OTX Pulse Analysis — Infostealer & Credential Theft Detection Pack
Threat Summary Two OTX pulses published 2026-09-02 paint a converging picture of the credential- and cryptocurrency-theft ecosystem: a legac...
CVE-2026-0768: Langflow Unauthenticated RCE Exploited for OpenAI and AWS Key Theft — Detection and Remediation Guide
What happened Threat actors are exploiting CVE-2026-0768, a critical unauthenticated remote code execution vulnerability in Langflow, an ope...
pepesoft.exe Infostealer + ZBT Firmware Implants + XenoRAT Spear-Phishing: OTX Pulse Analysis — Enterprise Detection Pack
pepesoft.exe Infostealer + ZBT Firmware Implants + XenoRAT Spear-Phishing: OTX Pulse Analysis — Enterprise Detection Pack Classification: TL...
CastleLoader/NeedleStealer, MCP AI-Agent Exploitation and RecruitTrap Mobile OAuth Theft: OTX Enterprise Detection Pack
CastleLoader/NeedleStealer, MCP AI-Agent Exploitation and RecruitTrap Mobile OAuth Theft Threat Summary The three pulses collectively show c...
GoCaracal + Bandook C2, MCP Secrets Abuse, and RecruitTrap OAuth Phishing: OTX Pulse Detection Pack — 2026-08-26
GoCaracal + Bandook C2, MCP Secrets Abuse, and RecruitTrap OAuth Phishing: OTX Pulse Detection Pack — 2026-08-26 Threat Summary Three concur...
Epic MyChart Phishing Campaign Hits U.S. Health Systems: Detection and Defense Guide for Healthcare Security Teams
Epic MyChart Phishing Campaign: What Healthcare Defenders Need to Know More than a dozen U.S. health care systems have issued warnings to pa...
RMM Phishing Campaign (Fake CRA T4 / SSA Lures): Living-Off-the-Land RMM Abuse — OTX Pulse Detection Pack
Threat Summary This OTX pulse (AlienVault, TLP:WHITE, modified 2026-08-26) documents a phishing operation that began as a Canada Revenue Age...
AMOS Stealer EtherHiding C2, EKZ Stealer via Fortinet CVE-2026-35616 & RecruitTrap OAuth Phishing: OTX Pulse Analysis — Enterprise Detection Pack
AMOS Stealer EtherHiding C2, EKZ Stealer via Fortinet CVE-2026-35616 & RecruitTrap OAuth Phishing: OTX Pulse Analysis — Enterprise Detection...