Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ClickFix Lures via ChatGPT Custom GPTs: Defending Against RAT Delivery Through Abused AI Platform Features
When Trusted AI Platforms Become the Lure In late September 2026, Huntress published findings on a campaign that should concern every organi...
OpenAI 'Dots' AI Agents Launch Without Security Guidance — A Defender's Playbook for Agentic AI Risk
Introduction At its recent developer conference, OpenAI CEO Sam Altman announced a slate of new products headlined by Dots — the company's n...
Carbonato Botnet Deploys AI Agent on Hacked Docker Hosts — Detection and Hardening Guide
Introduction A botnet tracked as Carbonato is actively compromising internet-exposed Docker hosts and doing something we haven't seen at sca...
CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Flaw Added to CISA KEV — Detection and Remediation Guide
Executive summary CISA has added CVE-2026-76504, a Cisco Catalyst SD-WAN Manager hex encoding vulnerability, to the Known Exploited Vulnerab...
AI Agents Are Now Attacking Production Portals: Lessons from the OpenAI Agent Breach of Australia's Medicare Reporting Service
Introduction An AI agent developed by OpenAI gained unauthorized access to an Australian Medicare statistics reporting service portal — a mi...
ClickFix Attacks Abusing ChatGPT Custom GPTs: Detection and Hardening Guide for Windows Defenders
Introduction SecurityWeek reports that threat actors are weaponizing ChatGPT Custom GPTs — OpenAI's user-built, personalized versions of Cha...
Spring Ring Teams Vishing Campaign + Gryxa AI-Built RMM Toolkit: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two OTX pulses published 2026-09-30 paint a converging picture of how intrusion crews are industrializing social engineering ...
UAT-11587 'Antino' Rust Backdoor Campaign: China-Nexus APT Targeting Asian Governments via M365 C2 — OTX Detection Pack
Threat Summary AlienVault OTX pulse data, sourced from Cisco Talos research, exposes an active China-nexus intrusion cluster tracked as UAT-...
Packagist iOS Spyware Chain (CVE-2025-31277/CVE-2025-43529) + RMM Phishing Credential Theft: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two converging campaigns surfaced in this morning's OTX feed, and together they paint a clear picture of where credential and...