Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-53988: Critical Dockhand Webhook Authentication Bypass (CVSS 10) — Detection and Remediation Guide
Introduction NVD has published CVE-2026-53988, a maximum-severity (CVSS 10.0, CRITICAL, network-exploitable) authentication bypass in Dockha...
EMPERADOR Ransomware Gang: 5 New Leak-Site Listings — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-09-29 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
RATHat Android Banking Trojan: From BlackCat Panel to Panda Workshop — ADB Exploitation C2 Detection Pack
Threat Summary A new pulse published to AlienVault OTX by AlienVault Labs (drawing on Cleafy research) documents the evolution of the RATHat...
Fake VPN Chrome Extension Proxy Farm: OTX Pulse Analysis — Enterprise Browser Traffic Interception Detection Pack
Threat Summary AlienVault OTX flags a coordinated cluster of 31 Russian-language Chrome extensions impersonating VPN access for RuTracker, Y...
M3RX Ransomware Gang: 6 Leak-Site Listings Posted — Sector Targeting Analysis & Detection Rules
Classification: TLP:CLEAR | Publication Date: 2026-09-29 | Source: ransomware.live leak-site monitoring (single-source for some listings — s...
CVE-2026-22755: VIVOTEK Camera Firmware RCE — Defensive Guide for FD/FE/IB Series Exposure
Introduction CISA has published ICSA-26-272-03 for VIVOTEK camera firmware after a CSAF advisory described a vulnerability that may allow re...
Amazon Bedrock AgentCore SDK Flaws: Defending AI Sandboxes From Command Execution and AWS Credential Theft
Introduction A recent report describes security flaws in the Amazon Bedrock AgentCore SDK that could allow an attacker who influences an AI ...
Times Car Data Breach: 6.6 Million Accounts Exposed — Detection and Response Guidance for Defenders
What Happened Japanese car-sharing service Times Car (operated by Times Mobility / the Park24 Group) has confirmed a cyberattack that compro...
MCP Python SDK OAuth Credential Leak: Detection and Remediation Guide for Token Endpoint Exfiltration
MCP Python SDK OAuth Credential Leak: Detection and Remediation Guide for Token Endpoint Exfiltration Introduction The maintainers of the of...